ci: aus organization ci

bifravst · Apr 5, 2024 · 614b5c8 · 614b5c8
1 parent 69e4f7e
commit 614b5c8
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.github/workflows/test-and-release.yaml b/.github/workflows/test-and-release.yaml
@@ -5,6 +5,7 @@ on: push
 permissions:
   contents: write
   issues: write
+  id-token: write
 
 env:
   NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -40,6 +41,16 @@ jobs:
       - name: Compile
         run: npm run prepublishOnly
 
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          # The role is set up via https://github.com/hello-nrfcloud/ci
+          # secrets.AWS_ACCOUNT_ID_CI is an organization secret
+          role-to-assume: |
+            arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID_CI }}:role/hello-nrfcloud-ci-${{ github.event.repository.name }}
+          # vars.AWS_REGION_CI is an organization variable
+          aws-region: ${{ vars.AWS_REGION_CI }}
+
       - name: Deploy
         run: ./cli.js > http-api-mock.json