on-iac-pr-against-dev.yaml

# ===================================================================================== #
#           GitHub Actions configuration file for an AWS Glue ETL application           #
#                                                                                       #
# This workflow will:                                                                   #
#   1. Create AWS resources for the QA environment using Terraform.                     #
# ===================================================================================== #

name: on IaC PR against [dev]

on:
  pull_request:
    branches: [dev]
    paths:
      - ".github/workflows/on-iac-*.yaml"
      - "infrastructure/**"

jobs:

# ===================================================================================== #
#                    CREATE THE AWS RESOURCES FOR THE QA ENVIRONMENT                    #
# ===================================================================================== #
  terraform-qa-infrastructure:
    environment: quality-assurance
    runs-on: ubuntu-latest
    permissions:
      id-token: write # This is required for requesting the JWT
    steps:
      - uses: actions/checkout@v3
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v3
        with:
          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/GlueCICDGitHubActionsServiceRole
          aws-region: ${{ vars.AWS_REGION }}
      - uses: hashicorp/setup-terraform@v2
      - name: Terraform style check
        run: terraform fmt -check -recursive ./infrastructure
      - name: Terraform validate
        run: terraform -chdir=./infrastructure validate
      - name: Terraform init
        run: terraform -chdir=./infrastructure/environments/qa init -input=false
      - name: Terraform plan
        run: terraform -chdir=./infrastructure/environments/qa plan -input=false
      - name: Terraform apply
        run: terraform -chdir=./infrastructure/environments/qa apply -input=false -auto-approve