Currently, it is only possible to set one filter per role.
|
StringLike: { |
|
// Only allow specified subjects to assume this role |
|
[`${GithubActionsIdentityProvider.issuer}:sub`]: subject, |
|
}, |
However I believe it is possible to support an array of filters, like so:
"Condition": {
"ForAnyValue:StringLike": {
"token.actions.githubusercontent.com:sub": [
"repo:myorg/myrepo:ref:refs/heads/test-branch-1",
"repo:myorg/myrepo:ref:refs/heads/test-branch-2"
]
}
(not actually tested, source)
Currently, it is only possible to set one filter per role.
aws-cdk-github-oidc/src/role.ts
Lines 163 to 166 in 53de62a
However I believe it is possible to support an array of filters, like so:
(not actually tested, source)