Configure release process to assume AWS role

Signed-off-by: Jota Martos <[email protected]>
bitnami · Dec 19, 2023 · 96b6ca8 · 96b6ca8
1 parent 5e54d78
commit 96b6ca8
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -77,15 +77,21 @@ jobs:
     runs-on: ubuntu-20.04
     name: Upload
     env:
-      AWS_ACCESS_KEY_ID: ${{ secrets.S3_USER }}
-      AWS_SECRET_ACCESS_KEY: ${{ secrets.S3_PASSWORD }}
-      AWS_DEFAULT_REGION: us-east-1
       S3_URL: ${{ secrets.S3_URL }}
     steps:
       - uses: actions/checkout@v3
       - uses: actions/download-artifact@v3
         with:
           path: ./artifacts
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: us-east-1
+          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+          role-duration-seconds: 1200
+          role-session-name: MySessionName
       - name: Upload to S3 bucket
         run: |
           set -e