OIDC Permissions Fix
🔧 OIDC Authentication Fix
Added Missing IAM Permissions:
iam:UpdateOpenIDConnectProviderThumbprint- Required for updating OIDC provider thumbprintsiam:CreateOpenIDConnectProvider- For creating OIDC providersiam:DeleteOpenIDConnectProvider- For cleanup operationsiam:GetOpenIDConnectProvider- For reading OIDC provider detailsiam:ListOpenIDConnectProviders- For listing providers
What This Fixes:
- GitHub Actions should now be able to update OIDC provider thumbprints
- Resolves AccessDenied errors during infrastructure deployment
- Enables full OIDC-based authentication workflow
Testing:
This release will test the complete GitHub Actions + OIDC authentication flow with all required permissions.