deploy.yml

name: Deploy to AWS

on:
  push:
    branches: ["main"]
env:
  CDK_VERSION: "2.126.0"
  AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
  AWS_REGION: ${{ secrets.AWS_REGION }}
  API_KEY: ${{ secrets.API_KEY }}  
  APPLICATION_TAG: "${{ vars.APPLICATION_TAG }}"
  APPLICATION_NAME: "selenium-lambda"

permissions:
  id-token: write # This is required for requesting the JWT
  contents: read # This is required for actions/checkout

jobs:
  deploy:
    name: Build & Deploy
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v3
        with:
          role-to-assume: ${{ secrets.AWS_ASSUME_ROLE_ARN }}
          role-session-name: github-action-role
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Bootstrap, Build & Synth
        run: |
          . _CI/bootstrap.sh

      - name: Deploy
        run: |
          . _CI/deploy.sh
        env:
          SOURCE_PATH: "out"