ai-workspace-infra/iac_modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Configure AWS workflows to assume deploy role

Browse Source
This commit is contained in:
cloudneutral 2025-12-11 01:44:48 +08:00
parent b222de981c
commit 7b7db018f8
3 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/terraform-standard-iac-pipeline-aws-account-matrix.yaml vendored
View File

@ -17,6 +17,7 @@ env:
AWS_REGION: ap-northeast-1
BASE_DIR: iac-template/terraform-hcl-standard/aws-cloud/component/
DRY_RUN: ${{ github.event.inputs.dry_run || 'true' }}
AWS_ROLE_ARN: arn:aws:iam::950604983695:role/IacDeployRole
jobs:
terraform:
@ -46,6 +47,8 @@ jobs:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ env.AWS_REGION }}
role-to-assume: ${{ env.AWS_ROLE_ARN }}
role-session-name: github-actions
- name: Init
working-directory: ${{ env.BASE_DIR }}/${{ matrix.component }}

3
.github/workflows/terraform-standard-iac-pipeline-aws-global-landingzone-baseline.yaml vendored
View File

@ -23,6 +23,7 @@ on:
env:
TF_WORKDIR: iac-template/terraform-hcl-standard/aws-cloud
DEPLOY_ACTION: ${{ github.event.inputs.deploy_action || 'plan' }}
AWS_ROLE_ARN: arn:aws:iam::950604983695:role/IacDeployRole
jobs:
# -------------------------------------------------------
@ -45,6 +46,8 @@ jobs:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_REGION }}
role-to-assume: ${{ env.AWS_ROLE_ARN }}
role-session-name: github-actions
- name: Terraform Init (LandingZone)
working-directory: ${{ env.TF_WORKDIR }}/envs/dev-landingzone

3
.github/workflows/terraform-standard-iac-pipeline-aws-resources-matrix.yaml vendored
View File

@ -17,6 +17,7 @@ env:
BASE_DIR: iac-template/terraform-hcl-standard/aws-cloud/envs
AWS_REGION: ap-northeast-1
DRY_RUN: ${{ github.event.inputs.dry_run || 'true' }}
AWS_ROLE_ARN: arn:aws:iam::950604983695:role/IacDeployRole
jobs:
terraform:
@ -46,6 +47,8 @@ jobs:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ env.AWS_REGION }}
role-to-assume: ${{ env.AWS_ROLE_ARN }}
role-session-name: github-actions
- name: Init
working-directory: ${{ env.BASE_DIR }}/${{ matrix.env }}