Securely deploy to AWS with GitHub Actions and OIDC

Managing deployment credentials need not be a complex undertaking. With a little bit of configuration, you can enable access for your repositories to deploy to your cloud provider via GitHub Actions. Mike Stemle joins us to walk us through the core setup and configuration to manage credentials and permissions with AWS and GitHub Actions.
▬▬▬▬▬▬ WANT TO LEARN MORE? 🚀 ▬▬▬▬▬▬
🔗Demo repo: gh.io/15mm-aws-oidc-demo
🔗Configuring OIDC with AWS and GitHub Actions: gh.io/15mm-aws-oidc-docs
▬▬▬▬▬▬ TIMESTAMPS ⌚ ▬▬▬▬▬▬
00:00 - Introduction
01:51 - What is OIDC?
02:42 - Setting up your environment for OIDC
06:00 - Roles for OIDC
09:22 - OIDC in web view
11:13 - Deploying to AWS with OIDC and GitHub Actions
👋Connect with Christopher on LinkedIn - / geektrainer
👋Connect with Mike - / manchicken
Stay up-to-date on all things GitHub by connecting with us:
KZbin: gh.io/subgithub
Blog: github.blog
X: / github
LinkedIn: / github
Insider newsletter: resources.github.com/newsletter/
Instagram: / github
TikTok: / github
About GitHub
It’s where over 100 million developers create, share, and ship the best code possible. It’s a place for anyone, from anywhere, to build anything-it’s where the world builds software. github.com
#security #github #authentication #cloud #aws

[@iuseh]

Nice video

[@jordanfrey9109]

great video. Though, I am having trouble implementing this with Github Enterprise Server using manually synced actions. I think it might be an issue with my trust policy conditions. Could you explain what the differences there should be? I've gone over the documentation, but it still seems unclear to me. configure-aws-credentials@v3 gets stuck on 'Assuming Role with OIDC'.

[@skevmit]

If an organization has hundreds of repositories, it is very difficult to take care of security on the AWS policy side. Repositories are created in a flat structure, there are no directories where they can be grouped. The trust policy is limited in size, so you can't rely on the currently sent parameters in tokens to group permissions if you want to enable access to rolę from some group of repos

[@ihate6650]

❤