Skip to content

Commit 1e18db3

Browse files
chore: use secrets for workflow role
1 parent b5bbdcd commit 1e18db3

1 file changed

Lines changed: 1 addition & 2 deletions

File tree

.github/workflows/pull-request-build.yaml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,6 @@ env:
1414
SCRIPT_LOCATION: 'workflows/start-pull-request-build/pull-request-build-v1.sh'
1515

1616
# custom variables
17-
IAM_ROLE_ARN: 'ROLE_ARN'
1817
ROLE_SESSION_DURATION_SECONDS: 7200
1918

2019
jobs:
@@ -30,7 +29,7 @@ jobs:
3029
- name: Configure AWS Credentials
3130
uses: aws-actions/configure-aws-credentials@main
3231
with:
33-
role-to-assume: '$IAM_ROLE_ARN'
32+
role-to-assume: ${{secrets.PR_WORKFLOW_IAM_ROLE_ARN}}
3433
role-session-name: PullRequestBuildGitHubAction
3534
role-duration-seconds: '$ROLE_SESSION_DURATION_SECONDS'
3635
aws-region: us-west-2

0 commit comments

Comments
 (0)