mirror of
https://github.com/tiennm99/miti99bot.git
synced 2026-06-09 00:17:55 +00:00
tiennm99
fb553cfe93
- aws/README.md: one-time AWS account setup (account ID, IAM, OIDC) - aws/iam-github-oidc-trust.json: GitHub OIDC trust policy template - docs/deploy-aws.md: steady-state deployment operations guide
25 lines
699 B
JSON
25 lines
699 B
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Principal": {
|
|
"Federated": "arn:aws:iam::REPLACE_WITH_AWS_ACCOUNT_ID:oidc-provider/token.actions.githubusercontent.com"
|
|
},
|
|
"Action": "sts:AssumeRoleWithWebIdentity",
|
|
"Condition": {
|
|
"StringEquals": {
|
|
"token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
|
|
},
|
|
"StringLike": {
|
|
"token.actions.githubusercontent.com:sub": [
|
|
"repo:tiennm99/miti99bot-go:ref:refs/heads/main",
|
|
"repo:tiennm99/miti99bot-go:ref:refs/heads/dev",
|
|
"repo:tiennm99/miti99bot-go:pull_request"
|
|
]
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|