test: Update GHA thumbprint for OIDC (#4155)

aws · Jun 28, 2023 · b296941 · b296941
1 parent 6436de2
commit b296941
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/test/gha/cloudformation/iam_cloudformation.yaml b/test/gha/cloudformation/iam_cloudformation.yaml
@@ -17,8 +17,12 @@ Resources:
       Url: https://token.actions.githubusercontent.com
       ClientIdList:
         - sts.amazonaws.com
+      # Relevant context for all these thumbprints can be found in the GH issue and blogpost:
+      # https://github.com/aws-actions/configure-aws-credentials/issues/357#issuecomment-1605290219
+      # https://github.blog/changelog/2023-06-27-github-actions-update-on-oidc-integration-with-aws/
       ThumbprintList:
         - 6938fd4d98bab03faadb97b34396831e3780aea1
+        - 1c58a3a8518e8759bf075b76b750d4f2df264fcd
   GithubActionsPolicy:
     Type: AWS::IAM::ManagedPolicy
     Properties: