26 lines
918 B
Markdown
26 lines
918 B
Markdown
# aws-configure
|
|
|
|
Authenticate with AWS via OIDC and export credentials to the environment.
|
|
|
|
## Inputs
|
|
|
|
| Input | Required | Default | Description |
|
|
|-------|----------|---------|-------------|
|
|
| `role-arn` | Yes | | Full IAM role ARN |
|
|
| `region` | No | `eu-central-1` | AWS region |
|
|
| `aws-access-key-id` | No | | AWS access key to use. Only required for some authentication types. |
|
|
| `aws-secret-access-key` | No | | AWS secret key to use. Only required for some authentication types. |
|
|
|
|
## Usage
|
|
|
|
```yaml
|
|
- uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/aws-configure@aws-configure-v1
|
|
with:
|
|
role-arn: arn:aws:iam::123456789012:role/my-role
|
|
```
|
|
|
|
## Notes
|
|
|
|
- Requires `enable-openid-connect: true` on the Forgejo runner job.
|
|
- Credentials are exported via `$FORGEJO_ENV` so subsequent steps can use them.
|
|
- When `aws-profile` is not `default`, a named AWS CLI profile is also configured.
|