fix(ci): pin deploy role ARN for OIDC auth

The deploy workflow no longer relies on a missing AWS_ACCOUNT_ID secret,
preventing invalid assume-role ARNs and matching the repo's documented AWS setup.
This commit is contained in:
2026-05-15 22:36:15 +07:00
parent dbfee38232
commit 0502ea28d2
3 changed files with 8 additions and 8 deletions
+1 -1
View File
@@ -34,7 +34,7 @@ jobs:
- uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/github-deploy-miti99bot
role-to-assume: arn:aws:iam::225603493174:role/github-deploy-miti99bot
aws-region: ${{ env.AWS_REGION }}
- name: Build Lambda binary