Authenticate CI Pipeline With AWS - Githubissues

sixfeetup / scaf

scaf provides developers and DevOps engineers with a complete blueprint for a new project using Kubernetes

BSD 3-Clause "New" or "Revised" License

36 stars 7 forks source link

Authenticate CI Pipeline With AWS #189

Open sedatbasar opened 4 months ago

sedatbasar commented 4 months ago

AC:

Take care to remove any AWS access keys from the pipeline and use an IAM Role to connect GitHub actions to AWS as described in this article: https://aws.amazon.com/blogs/security/use-iam-roles-to-connect-github-actions-to-actions-in-aws/. For Bitbucket see this article: https://support.atlassian.com/bitbucket-cloud/docs/deploy-on-aws-using-bitbucket-pipelines-openid-connect/

Refinement Notes: We already have a CI/CD role in terraform.