chore: Update dist

dist/index.js

@@ -127,17 +127,62 @@ module.exports = AWS.MediaLive;
 
 const core = __webpack_require__(6470);
 const aws = __webpack_require__(9350);
+const assert = __webpack_require__(2357);
+const util = __webpack_require__(1669);
 
-async function run() {
+// The max time that a GitHub action is allowed to run is 6 hours.
-  try {
+// That seems like a reasonable default to use if no role duration is defined.
-    // Get inputs
+const MAX_ACTION_RUNTIME = 6 * 3600;
-    const accessKeyId = core.getInput('aws-access-key-id', { required: true });
+const USER_AGENT = 'configure-aws-credentials-for-github-actions';
-    const secretAccessKey = core.getInput('aws-secret-access-key', { required: true });
-    const region = core.getInput('aws-region', { required: true });
-    const sessionToken = core.getInput('aws-session-token', { required: false });
-    const maskAccountId = core.getInput('mask-aws-account-id', { required: false });
 
+async function assumeRole(params) {
+  // Assume a role to get short-lived credentials using longer-lived credentials.
+  const isDefined = i => !!i;
+
+  const {roleToAssume, roleDurationSeconds, accessKeyId, secretAccessKey, sessionToken, region} = params;
+  assert(
+      [roleToAssume, roleDurationSeconds, accessKeyId, secretAccessKey, region].every(isDefined),
+      "Missing required input when assuming a Role."
+  );
+
+  const {GITHUB_REPOSITORY, GITHUB_WORKFLOW, GITHUB_ACTION, GITHUB_ACTOR, GITHUB_REF, GITHUB_SHA} = process.env;
+  assert(
+      [GITHUB_REPOSITORY, GITHUB_WORKFLOW, GITHUB_ACTION, GITHUB_ACTOR, GITHUB_REF, GITHUB_SHA].every(isDefined),
+      'Missing required environment value. Are you running in GitHub Actions?'
+  );
+
+  const endpoint = util.format('https://sts.%s.amazonaws.com', region);
+
+  const sts = new aws.STS({
+    accessKeyId, secretAccessKey, sessionToken, region, endpoint, customUserAgent: USER_AGENT
+  });
+  return sts.assumeRole({
+    RoleArn: roleToAssume,
+    RoleSessionName: 'GitHubActions',
+    DurationSeconds: roleDurationSeconds,
+    Tags: [
+      {Key: 'GitHub', Value: 'Actions'},
+      {Key: 'Repository', Value: GITHUB_REPOSITORY},
+      {Key: 'Workflow', Value: GITHUB_WORKFLOW},
+      {Key: 'Action', Value: GITHUB_ACTION},
+      {Key: 'Actor', Value: GITHUB_ACTOR},
+      {Key: 'Branch', Value: GITHUB_REF},
+      {Key: 'Commit', Value: GITHUB_SHA},
+    ]
+  })
+  .promise()
+  .then(function (data) {
+    return {
+      accessKeyId: data.Credentials.AccessKeyId,
+      secretAccessKey: data.Credentials.SecretAccessKey,
+      sessionToken: data.Credentials.SessionToken,
+    };
+  });
+}
+
+function exportCredentials(params){
   // Configure the AWS CLI and AWS SDKs using environment variables
+  const {accessKeyId, secretAccessKey, sessionToken} = params;
 
   // AWS_ACCESS_KEY_ID:
   // Specifies an AWS access key associated with an IAM user or role
@@ -152,16 +197,18 @@ async function run() {
   if (sessionToken) {
     core.exportVariable('AWS_SESSION_TOKEN', sessionToken);
   }
+}
 
+function exportRegion(region) {
   // AWS_DEFAULT_REGION and AWS_REGION:
   // Specifies the AWS Region to send requests to
   core.exportVariable('AWS_DEFAULT_REGION', region);
   core.exportVariable('AWS_REGION', region);
+}
 
+async function exportAccountId(maskAccountId) {
   // Get the AWS account ID
-    const sts = new aws.STS({
+  const sts = new aws.STS({customUserAgent: USER_AGENT});
-      customUserAgent: 'configure-aws-credentials-for-github-actions'
-    });
   const identity = await sts.getCallerIdentity().promise();
   const accountId = identity.Account;
   core.setOutput('aws-account-id', accountId);
@@ -169,8 +216,41 @@ async function run() {
     core.setSecret(accountId);
   }
 }
+
+async function run() {
+  try {
+    // Get inputs
+    const accessKeyId = core.getInput('aws-access-key-id', { required: true });
+    const secretAccessKey = core.getInput('aws-secret-access-key', { required: true });
+    const region = core.getInput('aws-region', { required: true });
+    const sessionToken = core.getInput('aws-session-token', { required: false });
+    const maskAccountId = core.getInput('mask-aws-account-id', { required: false });
+    const roleToAssume = core.getInput('role-to-assume', {required: false});
+    const roleDurationSeconds = core.getInput('role-duration-seconds', {required: false}) || MAX_ACTION_RUNTIME;
+
+    // Get role credentials if configured to do so
+    if (roleToAssume) {
+      const roleCredentials = await assumeRole(
+          {accessKeyId, secretAccessKey, sessionToken, region, roleToAssume, roleDurationSeconds}
+      );
+      exportCredentials(roleCredentials);
+    } else {
+      exportCredentials({accessKeyId, secretAccessKey, sessionToken});
+    }
+
+    exportRegion(region);
+
+    await exportAccountId(maskAccountId);
+  }
   catch (error) {
     core.setFailed(error.message);
+
+    const showStackTrace = process.env.SHOW_STACK_TRACE;
+
+    if (showStackTrace === 'true') {
+      throw(error)
+    }
+
   }
 }
 
@@ -7295,6 +7375,13 @@ Object.defineProperty(apiLoader.services['mediapackagevod'], '2018-11-07', {
 module.exports = AWS.MediaPackageVod;
 
 
+/***/ }),
+
+/***/ 2357:
+/***/ (function(module) {
+
+module.exports = require("assert");
+
 /***/ }),
 
 /***/ 2382: