chore: Update AWS credentials configuration and deploy script for kno…

…wx project
wizelineacademy · May 17, 2024 · a649803 · a649803
1 parent 07f940a
commit a649803
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/frontend_deploy.yml b/.github/workflows/frontend_deploy.yml
@@ -4,6 +4,10 @@ on:
     branches:
       - H010-UserHistory
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   test:
     name: "Frontend Tests"
@@ -72,9 +76,9 @@ jobs:
       - name: Cofigure AWS
         uses: aws-actions/configure-aws-credentials@v4
         with:
+          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+          role-duration-seconds: 1200
           aws-region: us-east-1
-          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
 
       - name: Install SST
         run: |