Skip to content

Commit be2f9be

Browse files
author
Somnath Mukherjee
committed
[menu_get_svc] added env accountid extraction
1 parent fa0a9f8 commit be2f9be

File tree

1 file changed

+13
-2
lines changed

1 file changed

+13
-2
lines changed

.github/workflows/cd.yaml

Lines changed: 13 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,12 +54,23 @@ jobs:
5454
echo "ENVIRONMENT=${ENVIRONMENT}" >> $
5555
echo "ENVIRONMENT_UPPER=$(echo $ENVIRONMENT | tr '[:lower:]' '[:upper:]')" >> $GITHUB_ENV
5656
57+
- name: Extract AWS Account ID from Secret
58+
id: account
59+
run: |
60+
case "$ENVIRONMENT" in
61+
dev) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_DEV }}" >> $GITHUB_ENV ;;
62+
test) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_TEST }}" >> $GITHUB_ENV ;;
63+
staging) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_STAGING }}" >> $GITHUB_ENV ;;
64+
uat) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_UAT }}" >> $GITHUB_ENV ;;
65+
prod) echo "ACCOUNT_ID=${{ secrets.AWS_ACCOUNT_ID_PROD }}" >> $GITHUB_ENV ;;
66+
esac
67+
5768
- name: Configure AWS credentials using OIDC token
5869
uses: aws-actions/configure-aws-credentials@v4
5970
with:
60-
role-to-assume: arn:aws:iam::${{ secrets[format('AWS_ACCOUNT_ID_${{ env.ENVIRONMENT_UPPER }}')] }}:role/GitHubActionsDeployRole
71+
role-to-assume: arn:aws:iam::${{ env.ACCOUNT_ID }}:role/GitHubActionsDeployRole
6172
role-session-name: menu-get-svc-${{ env.ENVIRONMENT }}-session
62-
aws-region: us-east-1
73+
aws-region: ${{ env.REGION_US_EAST1 }}
6374

6475
- name: Build app
6576
run: |

0 commit comments

Comments
 (0)