Validate AWS OIDC role presence before deployment

Author: nirmalsunny

.github/workflows/deploy.yml

@@ -64,6 +64,16 @@ jobs:
       - name: Install Post-CSS
         run: npm install postcss-cli
 
+      - name: Validate AWS OIDC role
+        run: |
+          if [ -z "$DEPLOY_ROLE_ARN" ] && [ -z "$AWS_OIDC_ROLE" ]; then
+            printf '%s\n' "Either the deploy-role-arn input or AWS_OIDC_ROLE secret must be provided." >&2
+            exit 1
+          fi
+        env:
+          DEPLOY_ROLE_ARN: ${{ inputs.deploy-role-arn }}
+          AWS_OIDC_ROLE: ${{ secrets.AWS_OIDC_ROLE }}
+
       - name: AWS Github OIDC Login
         uses: aws-actions/configure-aws-credentials@v6
         with: