Update generalized-deploy.yaml to use IAM role (#689)

* Update generalized-deploy.yaml to use IAM role * Update generalized-deploy.yaml
brave-intl · May 7, 2024 · 33cad28 · 33cad28
1 parent 7859e09
commit 33cad28
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/.github/workflows/generalized-deploy.yaml b/.github/workflows/generalized-deploy.yaml
@@ -10,15 +10,16 @@ jobs:
   push:
     name: Invoke Challenge By Pass Docker Build Pipeline
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     steps:
     - name: Checkout
       uses: actions/checkout@v2
     - name: Configure AWS Credentials
       uses: aws-actions/configure-aws-credentials@v1
       with:
-        aws-access-key-id: ${{ secrets.GDBP_AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.GDBP_AWS_SECRET_ACCESS_KEY }}
+        role-to-assume: ${{ secrets.GDBP_AWS_IAM_ROLE_ARN }}
         aws-region: us-west-2
-        commit: ${{ github.sha }}
     - name: Challenge Bypass Server Deployments
-      uses: brave-intl/[email protected]
+      uses: brave-intl/[email protected]