mirror of
https://github.com/aws-actions/configure-aws-credentials.git
synced 2026-03-12 18:07:10 -04:00
* feat: Add the ability to use a web identity token file * mark web identity token file as not required * fix indentation * better docs and added support for relative vs absolute paths * bind sts context and adjust fs calls * exclude tags if using web identity token file * fix readme aand adjust tag removal logic * undo re-ordering of lines Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
61 lines
2.2 KiB
YAML
61 lines
2.2 KiB
YAML
name: '"Configure AWS Credentials" Action For GitHub Actions'
|
|
description: 'Configure AWS credential and region environment variables for use with the AWS CLI and AWS SDKs'
|
|
branding:
|
|
icon: 'cloud'
|
|
color: 'orange'
|
|
inputs:
|
|
aws-access-key-id:
|
|
description: >-
|
|
AWS Access Key ID. This input is required if running in the GitHub hosted environment.
|
|
It is optional if running in a self-hosted environment that already has AWS credentials,
|
|
for example on an EC2 instance.
|
|
required: false
|
|
aws-secret-access-key:
|
|
description: >-
|
|
AWS Secret Access Key. This input is required if running in the GitHub hosted environment.
|
|
It is optional if running in a self-hosted environment that already has AWS credentials,
|
|
for example on an EC2 instance.
|
|
required: false
|
|
aws-session-token:
|
|
description: 'AWS Session Token'
|
|
required: false
|
|
aws-region:
|
|
description: 'AWS Region, e.g. us-east-2'
|
|
required: true
|
|
mask-aws-account-id:
|
|
description: >-
|
|
Whether to set the AWS account ID for these credentials as a secret value,
|
|
so that it is masked in logs. Valid values are 'true' and 'false'.
|
|
Defaults to true
|
|
required: false
|
|
role-to-assume:
|
|
description: >-
|
|
Use the provided credentials to assume an IAM role and configure the Actions
|
|
environment with the assumed role credentials rather than with the provided
|
|
credentials
|
|
required: false
|
|
web-identity-token-file:
|
|
description: >-
|
|
Use the web identity token file from the provided file system path in order to
|
|
assume an IAM role using a web identity. E.g., from within an Amazon EKS worker node
|
|
required: false
|
|
role-duration-seconds:
|
|
description: "Role duration in seconds (default: 6 hours)"
|
|
required: false
|
|
role-session-name:
|
|
description: 'Role session name (default: GitHubActions)'
|
|
required: false
|
|
role-external-id:
|
|
description: 'The external ID of the role to assume'
|
|
required: false
|
|
role-skip-session-tagging:
|
|
description: 'Skip session tagging during role assumption'
|
|
required: false
|
|
outputs:
|
|
aws-account-id:
|
|
description: 'The AWS account ID for the provided credentials'
|
|
runs:
|
|
using: 'node12'
|
|
main: 'dist/index.js'
|
|
post: 'dist/cleanup/index.js'
|