OIDC role definition

rrigato · Apr 20, 2024 · bff3e5a · bff3e5a
1 parent 07fb0d0
commit bff3e5a
Show file tree

Hide file tree

Showing 2 changed files with 47 additions and 0 deletions.
diff --git a/static/css/homepageSection.css b/static/css/homepageSection.css
@@ -30,6 +30,7 @@ ul{
     background-color: 	#aaaaaa;
     border-radius: 5%;
     color:black;
+    height: 800px;
     max-width: 750px;
 }
 
diff --git a/templates/homepage_backend.template b/templates/homepage_backend.template
@@ -0,0 +1,46 @@
+AWSTemplateFormatVersion: '2010-09-09'
+
+Description: Backend aws resources 
+
+Parameters:
+
+  githubUser:
+    Default: rrigato
+    Description: 'GitHub organization name'
+    Type: String
+
+
+  oidcAudience:
+    Default: 'sts.amazonaws.com'
+    Description: 'The audience for the OIDC provider'
+    Type: String
+
+  projectName:
+    Type: String
+    Default: homepage
+
+
+Resources:
+
+
+  projectRoleForGitHubActions:
+    Type: AWS::IAM::Role
+    Properties:
+      AssumeRolePolicyDocument:
+        Statement:
+          - Effect: Allow
+            Action: sts:AssumeRoleWithWebIdentity
+            Principal:
+              Federated:
+                Fn::ImportValue:
+                  githubOidcProviderArn
+            Condition:
+              StringEquals:
+                token.actions.githubusercontent.com:aud: !Ref oidcAudience
+              StringLike:
+                token.actions.githubusercontent.com:sub: !Sub repo:${githubUser}/${projectName}:*
+      Description: !Sub '${projectName} GitHub Actions role to assume'
+      ManagedPolicyArns:
+        - !Sub arn:aws:iam::${AWS::AccountId}:policy/${projectName}_pipeline_permissions
+      RoleName: !Sub ${projectName}-github-actions-role
+