cd: use aws roles

alercebroker · Dec 6, 2023 · 9626d6c · 9626d6c
1 parent 7d174d9
commit 9626d6c
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/.github/workflows/deploy_dev.yml b/.github/workflows/deploy_dev.yml
@@ -6,13 +6,10 @@ on:
 
 env:
   AWS_BUCKET_NAME: ${{ secrets.AWS_BUCKET_NAME_DEV }}
-  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
   AWS_CLOUDFRONT: ${{ secrets.AWS_CLOUDFRONT_ID_DEV }}
   NODE_ENV: staging
   APP_TITLE: ALeRCE Explorer - Staging Build
 
-
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -26,11 +23,18 @@ jobs:
       ZTF_DR_API_BASE_URL: ${{ secrets.ZTF_DR_API_BASE_URL }}
       USERS_API_BASE_URL: ${{ secrets.USERS_API_BASE_URL }}
     steps:
+      - name: Configure AWS credentials
+        id: creds
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE_STAGING }}
+          aws-region: us-east-1
+          output-credentials: true
+          unset-current-credentials: true
       - uses: actions/checkout@v1
       - uses: actions/setup-node@v1
         with:
           node-version: 16
       - run: npm install
       - run: npm run generate
       - run: npm run deploy
-