Adding permission

Signed-off-by: Peter Baker <[email protected]>
FAIMS · Aug 2, 2024 · fb938ff · fb938ff
1 parent 4a5759e
commit fb938ff
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/deploy-aws-cdk.yml b/.github/workflows/deploy-aws-cdk.yml
@@ -8,6 +8,10 @@ on:
     branches:
       - bss-214-github-action-deploy
 
+permissions:
+      id-token: write
+      contents: read
+
 jobs:
   cdk-deploy:
     runs-on: ubuntu-latest
@@ -39,9 +43,6 @@ jobs:
           echo "Environment: ${{ vars.CDK_DEPLOY_ENVIRONMENT }}"
         # You can now use these outputs in subsequent steps for AWS configuration
       - uses: aws-actions/configure-aws-credentials@v2
-        env:
-          AWS_REGION: ${{ steps.faims-config-setup.outputs.aws-region }}
-          AWS_ACCOUNT: ${{ steps.faims-config-setup.outputs.aws-account }}
         with:
           role-to-assume: ${{ vars.CDK_DEPLOY_GA_ROLE_ARN }}
           aws-region: ${{ steps.faims-config-setup.outputs.aws-region }}