Skip to content

Commit 81e93c3

Browse files
YilingCAIYilingCAI
committed
refactor github actions
1 parent dbb0f2a commit 81e93c3

14 files changed

Lines changed: 944 additions & 663 deletions

File tree

‎.github/WORKFLOWS.md‎

Lines changed: 0 additions & 341 deletions
This file was deleted.

‎.github/actions/aws-auth/action.yml‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
name: "AWS Authentication"
2+
description: "Authenticate with AWS using OIDC"
3+
4+
inputs:
5+
role-arn:
6+
description: "IAM role ARN to assume"
7+
required: true
8+
aws-region:
9+
description: "AWS region"
10+
required: false
11+
default: "us-east-1"
12+
session-name:
13+
description: "Session name for role assumption"
14+
required: false
15+
default: "github-actions"
16+
duration-seconds:
17+
description: "Duration of session in seconds"
18+
required: false
19+
default: "3600"
20+
21+
outputs:
22+
aws-account-id:
23+
description: "AWS Account ID"
24+
value: ${{ steps.aws-account.outputs.account-id }}
25+
aws-region:
26+
description: "AWS Region"
27+
value: ${{ inputs.aws-region }}
28+
29+
runs:
30+
using: "composite"
31+
steps:
32+
- name: Configure AWS credentials
33+
uses: aws-actions/configure-aws-credentials@v4
34+
with:
35+
role-to-assume: ${{ inputs.role-arn }}
36+
aws-region: ${{ inputs.aws-region }}
37+
role-session-name: ${{ inputs.session-name }}
38+
role-duration-seconds: ${{ inputs.duration-seconds }}
39+
40+
- name: Get AWS Account ID
41+
id: aws-account
42+
shell: bash
43+
run: |
44+
ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text)
45+
echo "account-id=$ACCOUNT_ID" >> $GITHUB_OUTPUT
46+
echo "✓ AWS Authentication successful - Account: $ACCOUNT_ID"

0 commit comments

Comments
 (0)