aws-actions/configure-aws-credentials
1
0
Fork 0
mirror of https://github.com/aws-actions/configure-aws-credentials.git synced 2026-09-04 06:15:07 +09:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #563 from russau/docs/readme-role-update

Browse Source 
Minor: include a role condition test for AUD in sample CFN template
This commit is contained in:
Peter Woodworth
2023-02-21 18:49:30 -08:00
committed by GitHub
parent 32eb1b4a66 85ec61b5fe
commit 567d4149d6
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+6
View File
@@ -161,6 +161,10 @@ Parameters:
Description: Arn for the GitHub OIDC Provider. Description: Arn for the GitHub OIDC Provider.
Default: "" Default: ""
Type: String Type: String
OIDCAudience:
Description: Audience supplied to configure-aws-credentials.
Default: "sts.amazonaws.com"
Type: String
Conditions: Conditions:
CreateOIDCProvider: !Equals CreateOIDCProvider: !Equals
@@ -181,6 +185,8 @@ Resources:
- !Ref GithubOidc - !Ref GithubOidc
- !Ref OIDCProviderArn - !Ref OIDCProviderArn
Condition: Condition:
StringEquals:
token.actions.githubusercontent.com:aud: !Ref OIDCAudience
StringLike: StringLike:
token.actions.githubusercontent.com:sub: !Sub repo:${GitHubOrg}/${RepositoryName}:* token.actions.githubusercontent.com:sub: !Sub repo:${GitHubOrg}/${RepositoryName}:*