Github Actions for automatic deployments

[alvyn279]

Look into a way to connect AWS infrastructure with Github Actions such that the app can be deployed at every change to main.

[alvyn279]

• https://github.com/marketplace/actions/aws-cdk-github-actions
• https://github.com/aws-actions/configure-aws-credentials

Looking into a way to use least privileged permissions for GitHub actions. Potentially an assume-role setup.

[alvyn279]

Done: https://github.com/alvyn279/alvyn279v2/actions/runs/362259859/workflow

Strategy

• GitHub Actions with Node runner that executes aws-cdk cli commands at push on main.
• AWS creds are achieved through GitHub Secrets injected as env vars in deployment workflow.
• Code encapsulates least privileged permissions into an IAM.User. Manual keys generation and GitHub Secrets registration needed for that user.