Opticutter

Sheet cut optimizer (static site).

Hosting

URL: https://sheetmaxxing.louisracicot.com

Deploy

git push origin main

GitHub Actions configuration

Name	Type	Value
AWS_DEPLOY_ROLE_ARN	secret	IAM role ARN for OIDC deploy (from stack output below)
HOSTED_ZONE_ID	variable	Route53 hosted zone ID for louisracicot.com

gh secret set AWS_DEPLOY_ROLE_ARN --repo lracicot/sheetmaxxing
gh variable set HOSTED_ZONE_ID --repo lracicot/sheetmaxxing

One-time IAM bootstrap

Deploy the GitHub OIDC role once in the target account (us-east-1):

aws cloudformation deploy \
  --template-file cloud/github-oidc.cfn.yaml \
  --stack-name opticutter-github-oidc \
  --capabilities CAPABILITY_NAMED_IAM \
  --region us-east-1

If the GitHub OIDC provider already exists in the account, pass its ARN:

ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text)
aws cloudformation deploy \
  --template-file cloud/github-oidc.cfn.yaml \
  --stack-name opticutter-github-oidc \
  --capabilities CAPABILITY_NAMED_IAM \
  --region us-east-1 \
  --parameter-overrides "OIDCProviderArn=arn:aws:iam::${ACCOUNT_ID}:oidc-provider/token.actions.githubusercontent.com"

Set AWS_DEPLOY_ROLE_ARN to arn:aws:iam::<account-id>:role/opticutter_github_cicd, then push to main or re-run the workflow.