File tree Expand file tree Collapse file tree 1 file changed +13
-2
lines changed Expand file tree Collapse file tree 1 file changed +13
-2
lines changed Original file line number Diff line number Diff line change @@ -54,12 +54,23 @@ jobs:
5454 echo "ENVIRONMENT=${ENVIRONMENT}" >> $
5555 echo "ENVIRONMENT_UPPER=$(echo $ENVIRONMENT | tr '[:lower:]' '[:upper:]')" >> $GITHUB_ENV
5656
57+ - name : Extract AWS Account ID from Secret
58+ id : account
59+ run : |
60+ case "$ENVIRONMENT" in
61+ dev) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_DEV }}" >> $GITHUB_ENV ;;
62+ test) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_TEST }}" >> $GITHUB_ENV ;;
63+ staging) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_STAGING }}" >> $GITHUB_ENV ;;
64+ uat) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_UAT }}" >> $GITHUB_ENV ;;
65+ prod) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_PROD }}" >> $GITHUB_ENV ;;
66+ esac
67+
5768 - name : Configure AWS credentials using OIDC token
5869 uses : aws-actions/configure-aws-credentials@v4
5970 with :
60- role-to-assume : arn:aws:iam::${{ secrets[format('AWS_ACCOUNT_ID_${{ env.ENVIRONMENT_UPPER }}')] }}:role/GitHubActionsDeployRole
71+ role-to-assume : arn:aws:iam::${{ env.ACCOUNT_ID }}:role/GitHubActionsDeployRole
6172 role-session-name : menu-get-svc-${{ env.ENVIRONMENT }}-session
62- aws-region : us-east-1
73+ aws-region : ${{ env.REGION_US_EAST1 }}
6374
6475 - name : Build app
6576 run : |
You can’t perform that action at this time.
0 commit comments