# aws-configure

Authenticate with AWS via OIDC and export credentials to the environment.

## Inputs

| Input | Required | Default | Description |
|-------|----------|---------|-------------|
| `role-arn` | Yes | | Full IAM role ARN |
| `region` | No | `eu-central-1` | AWS region |
| `aws-access-key-id` | No | | AWS access key to use. Only required for some authentication types. |
| `aws-secret-access-key` | No | | AWS secret key to use. Only required for some authentication types. |

## Usage

```yaml
- uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/aws-configure@aws-configure-v1
  with:
    role-arn: arn:aws:iam::123456789012:role/my-role
```

## Notes

- Requires `enable-openid-connect: true` on the Forgejo runner job.
- Credentials are exported via `$FORGEJO_ENV` so subsequent steps can use them.
- When `aws-profile` is not `default`, a named AWS CLI profile is also configured.