ci(fix): Use OIDC auth to upload artifact on s3

neondatabase · Dec 9, 2024 · 2c21bbf · 2c21bbf
1 parent 15a2e3e
commit 2c21bbf
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/actions/upload/action.yml b/.github/actions/upload/action.yml
@@ -53,6 +53,13 @@ runs:
 
         echo 'SKIPPED=false' >> $GITHUB_OUTPUT
 
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v4
+      with:
+        aws-region: eu-central-1
+        role-to-assume: ${{ vars.DEV_AWS_OIDC_ROLE_ARN }}
+        role-duration-seconds: 3600
+
     - name: Upload artifact
       if: ${{ steps.prepare-artifact.outputs.SKIPPED == 'false' }}
       shell: bash -euxo pipefail {0}