# cloudfront-invalidate

Invalidate one or more CloudFront distributions.

## Inputs

| Input | Required | Default | Description |
|-------|----------|---------|-------------|
| `distribution-ids` | Yes | | Space-separated CloudFront distribution IDs, or path to a file containing them |
| `aws-role-arn` | Yes | | IAM role via OIDC |
| `paths` | No | `/*` | Invalidation paths |
| `aws-profile` | No | `default` | AWS CLI profile name |

## Usage

```yaml
- uses: schmalz/shared-actions/.github/actions/cloudfront-invalidate@v1
  with:
    distribution-ids: E1234567890ABC E0987654321XYZ
    aws-role-arn: ${{ secrets.AWS_ROLE_ARN }}
```

## Notes

- `distribution-ids` can be literal IDs or a path to a file containing them (one per line or space-separated).
- Each distribution is invalidated separately in a loop.
- Uses `aws-configure` internally for OIDC authentication.