Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

This module creates the required roles in AWS to authenticate GitHub modules with AWS via OIDC.

License

NotificationsYou must be signed in to change notification settings

armakuni/terraform-aws-github-actions-oidc-role

Repository files navigation

This module creates the required roles in AWS to authenticate GitHub modules with AWS via OIDC.

You provide you GitHub organisation/username and repository name as variables to the module.It will create a role name<repository name>-github-actions which you can use to authenticate with AWS in your GitHub actions like so:

-name:Configure AWS credentialsuses:aws-actions/configure-aws-credentials@v3with:role-to-assume:arn:aws:iam::<aws account id>:role/<repository name>-github-actionsrole-session-name:aws-loginaws-region:eu-west-3

Requirements

No requirements.

Providers

NameVersion
awsn/a

Modules

No modules.

Resources

NameType
aws_iam_policy.custom_policyresource
aws_iam_role.thisresource
aws_iam_role_policy_attachment.custom_policy_attachmentresource
aws_iam_role_policy_attachment.policyresource
aws_iam_openid_connect_provider.oicd_providerdata source

Inputs

NameDescriptionTypeDefaultRequired
custom_policyA custom policy to attach to your role if you want more fine grained permissions
object(
{
Version = string
Statement = list(any)
}
)
nullno
git_refThe git refs for branches which can assume this rolestring"refs/heads/main"no
github_ownerThe Github user or organisation name that owns repository to add the role forstringn/ayes
github_repositoryThe name of the Github repository to add the role forstringn/ayes
oicd_provider_arnThe ARN of the Github Actions OIDC provider (if not provided, the module will use a data provider to find it)stringnullno
policy_arn_listA list of policy ARNs to attach to the role (there are the AWS permissions that your Github Actions pipeline will have)list(string)[]no

Outputs

NameDescription
roleThe attributes from the aws_iam_role resource

About

This module creates the required roles in AWS to authenticate GitHub modules with AWS via OIDC.

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Contributors5

Languages


[8]ページ先頭

©2009-2025 Movatter.jp