Use IAM Roles to push files on AWS S3. #469

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

umbynos merged 1 commit into main from OIDconnect

Mar 19, 2024

Merged

Use IAM Roles to push files on AWS S3. #469

umbynos merged 1 commit into main from OIDconnect

Mar 19, 2024

Conversation

umbynos

Copy link

Contributor

@umbynos umbynos commented Mar 12, 2024

For security reasons, long-lived credentials are not considered secure. To overcome this issue, we can configure GitHub Workflows to use AWS OpenID Connect instead: For further details: https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect

I already applied this concept to:
arduino-cli:

arduino-create-agent:

@umbynos umbynos added the topic: infrastructure label

Mar 12, 2024

@umbynos umbynos requested review from alessio-perugini, per1234 and MatteoPologruto

March 12, 2024 11:23

@umbynos umbynos self-assigned this

Mar 12, 2024

@umbynos umbynos force-pushed the OIDconnect branch from c3bdb2e to 2914e73 Compare

March 12, 2024 11:35

@umbynos


 Use IAM Roles to push files on AWS S3.

ccfbc73

For security reasons long lived credentials are not considered secure.
To overcome this issue we can configure Github Workflows to use AWS OpenID Connect instead:
For further details: https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect