G github.com Show HN: Stop Putting AWS Credentials in GitHub Secrets Greetings!I've created a GitHub action that works that allows GitHub Actions to exchange a GitHub token for AWS Access Credentials.I've cultivated a few examples of it in action:https://github.com/saml-to/aws-assume-role-action-examplesI've always found management of AWS Credentials has been a pain. So this setting up this Action works like this:1) A SAML Identity Provider is created in AWS2) A Role in AWS is set up to trust that Identity Provider3) A config file is added to the repository indicating which role can be assumed4) The GitHub Action exchanges the Repo Secret for AWS Credentials using the SAML.to backend for the exchangeLet me know what you think! I'm Happy to take questions and comments here or on Gitter:https://gitter.im/saml-to/assume-aws-role-action 88 points cnuss 4 years ago 29 comments
I've created a GitHub action that works that allows GitHub Actions to exchange a GitHub token for AWS Access Credentials.
I've cultivated a few examples of it in action:
https://github.com/saml-to/aws-assume-role-action-examples
I've always found management of AWS Credentials has been a pain. So this setting up this Action works like this:
1) A SAML Identity Provider is created in AWS
2) A Role in AWS is set up to trust that Identity Provider
3) A config file is added to the repository indicating which role can be assumed
4) The GitHub Action exchanges the Repo Secret for AWS Credentials using the SAML.to backend for the exchange
Let me know what you think! I'm Happy to take questions and comments here or on Gitter:
https://gitter.im/saml-to/assume-aws-role-action