Update README.md (#1544)

This commit is contained in:
Michael Lehmann
2025-11-04 15:25:54 -08:00
committed by kellertk
parent 3e5ba48531
commit fd1fab4c46

View File

@@ -447,6 +447,8 @@ In this two-step example, the first step will use OIDC to assume the role
example. Following that, a second step will use this role to assume a different
role, `arn:aws:iam::987654321000:role/my-second-role`.
Note that the trust relationship/trust policy of the second role must grant the permissions `sts:AssumeRole` and `sts:TagSession` to the first role. (Or, alternatively, the `TagSession` permission can be omitted if you are using the `role-skip-session-tagging: true` flag for the second step.)
### AssumeRole with static IAM credentials in repository secrets
```yaml
- name: Configure AWS Credentials