AWS Signature Version 4 (SigV4) Github Action

This Github Action allows you to call Lambda Function URL with AWS_IAM authentication mechanism by signing your request using the AWS Signature v4 process.

Usage

To use this action, you need to have the necessary information to sign your request. When you send API requests to AWS, you sign the requests so that AWS can identify who sent them. You sign requests with your AWS access key, which consists of an access key ID, a secret access key and optionnally a session token.

You can use this action after the configure-aws-credentials action. Here is an example:

1. Create a .github/workflows/my-workflow.yml file in your GitHub repo.
2. Add the following code to the my-workflow.yml file:

name: Test

# These permissions are needed to interact with GitHub's OIDC Token endpoint.
permissions:
  id-token: write
  contents: read
on:
  push:
jobs:
  test:
    name: Invoke Lambda Function URL with AWS_IAM auth.
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        # Use of OIDC integration but can be anything documented here:
        # https://github.com/aws-actions/configure-aws-credentials
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          role-to-assume: ${{ secrets.my-role-to-assume }}
          aws-region: eu-west-1
        timeout-minutes: 1

      - name: Invoke Lambda function
        uses: nexthink-cloud/aws-sigv4-action@v1
        with:
          method: POST
          lambda-url: https://1234567890abcdefghijklmnopqrstuv.lambda-url.eu-west-1.on.aws/event
          headers: |
            Content-Type: application/json
            User-Agent: GitHub-Hookshot/760256b
            Accept: *
          body: '{"Test": "result"}'
      
      - name: Check HTTP response code
        if: ${{ steps.lambda-invoke.outputs.code != 200 }} 
        uses: actions/github-script@v3
        with:
          script: |
            core.setFailed('Bad HTTP Code: ${{ steps.lambda-invoke.outputs.code }}, Response: ${{ steps.lambda-invoke.outputs.message }}')