Skip to content

Conversation

@rezabekf
Copy link
Contributor

@rezabekf rezabekf commented Dec 3, 2025

Issue number: closes #

Summary

Changes

Adds automated CDK deployment from GitHub Actions using OIDC authentication (no long-lived credentials).

  • Created separate CDK stack (GitHubOidcStack) for OIDC provider and IAM role - deployed independently as a one-time setup
  • Added deploy job to CI workflow with environment protection, concurrency controls, and SHA-pinned actions
  • IAM role uses sts:AssumeRole to CDK bootstrap roles
  • OIDC trust scoped to specific repository and GitHub environment

User experience

Before: No deployment from pipeline

After: Merging to main automatically deploys to AWS via GitHub Actions with secure, credential-less authentication.


By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@rezabekf rezabekf self-assigned this Dec 3, 2025
@github-actions
Copy link

github-actions bot commented Dec 3, 2025

Coverage report

This PR does not seem to contain any modification to coverable code.

@rezabekf rezabekf marked this pull request as ready for review December 3, 2025 19:50
@rezabekf rezabekf requested a review from a team as a code owner December 3, 2025 19:50
@rezabekf rezabekf marked this pull request as draft December 3, 2025 20:25
@rezabekf rezabekf marked this pull request as ready for review December 4, 2025 19:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant