terraform cd updated-NEW #12

	name: Deploy Infrastructure

	on:
	pull_request:
	branches:
	- main

	permissions:
	id-token: write # This is required for aws oidc connection
	contents: read # This is required for actions/checkout
	pull-requests: write # This is required for gh bot to comment PR

	env:
	TF_LOG: INFO
	AWS_REGION: ${{ secrets.AWS_REGION }}

	jobs:
	deploy:
	runs-on: ubuntu-latest

	defaults:
	run:
	shell: bash
	working-directory: ./terraform

	steps:
	- name: Git checkout
	uses: actions/checkout@v3

	- name: Configure AWS credentials from AWS account
	uses: aws-actions/configure-aws-credentials@v1
	with:
	role-to-assume: ${{ secrets.AWS_ROLE }}
	aws-region: ${{ secrets.AWS_REGION }}
	role-session-name: GitHub-OIDC-TERRAFORM

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v2
	with:
	terraform_version: 1.5.7

	- name: Terraform Init
	id: init
	env:
	AWS_BUCKET_NAME: ${{ secrets.AWS_BUCKET_NAME }}
	AWS_BUCKET_KEY_NAME: ${{ secrets.AWS_BUCKET_KEY_NAME }}
	run: terraform init -backend-config="bucket=${AWS_BUCKET_NAME}" -backend-config="key=${AWS_BUCKET_KEY_NAME}" -backend-config="region=${AWS_REGION}"

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	run: terraform plan -no-color
	if: github.event_name == 'pull_request'
	continue-on-error: true

	- name: Terraform Plan Status
	if: steps.plan.outcome == 'failure'
	run: exit 1

	- name: Terraform Apply
	if: github.ref == 'refs/heads/main' && github.event_name == 'pull_request'
	run: terraform apply -auto-approve -input=false

Provide feedback