Fix CI

vapor · Jun 23, 2024 · 36fc60a · 36fc60a
1 parent b7984b0
commit 36fc60a
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
@@ -11,16 +11,14 @@ jobs:
   build:
     name: Build and Deploy PR
     runs-on: ubuntu-latest
-    env:
-      AWS_DEFAULT_REGION: eu-west-2
+    permissions: { id-token: write, contents: read }
     steps:
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v4
         if: ${{ github.event.pull_request.head.repo.full_name == 'vapor/blog' && github.actor != 'dependabot[bot]' }}
         with:
-          aws-access-key-id: ${{ secrets.SITE_DEPLOYER_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.SITE_DEPLOYER_ACCESS_KEY_SECRET }}
-          aws-region: eu-west-2
+          role-to-assume: ${{ vars.OIDC_ROLE_ARN }}
+          aws-region: ${{ vars.OIDC_ROLE_REGION }}
       - name: Checkout code
         uses: actions/checkout@v4
       - name: Set up Python