awslabs / amazon-sns-python-extended-client-lib

Apache License 2.0
15 stars 2 forks source link

Change release procedure to use OIDC #9

Closed shih closed 1 year ago

shih commented 1 year ago

Issue #, if available:

Description of changes:

To meet security compliance, we need to change our current release procedure which is using the PyPI token we stored in GH secrets and do poetry publish.

The new approach is:

  1. We store our Tokens in SecretsManager in our AWS account
  2. Configure GH Action to get our AWS account credential
  3. Retrieve PyPI Token from SecretsManager
  4. Poetry Publish

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.