Merge pull request #12137 from conradt-paf/patch-2

github · Feb 16, 2022 · 0f2392a · 0f2392a
2 parents 860fde6 + df91bf9
commit 0f2392a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/...hardening-your-deployments/configuring-openid-connect-in-amazon-web-services.md b/...hardening-your-deployments/configuring-openid-connect-in-amazon-web-services.md
@@ -42,7 +42,8 @@ Edit the trust relationship to add the `sub` field to the validation conditions.
 
 ```json{:copy}
 "Condition": {
-  "StringEquals": {
+  "ForAllValues:StringEquals": {
+    "token.actions.githubusercontent.com:aud": "sts.amazonaws.com",
     "token.actions.githubusercontent.com:sub": "repo:octo-org/octo-repo:ref:refs/heads/octo-branch"
   }
 }