use secret for aws rule

auth0-extensions · Dec 20, 2024 · 17be005 · 17be005
1 parent 4bc3c55
commit 17be005
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -44,8 +44,7 @@ jobs:
     - name: Configure AWS Credentials using OIDC
       uses: aws-actions/configure-aws-credentials@v4
       with:
-        # TODO: retrieve this whole value from github secrets
-        role-to-assume: arn:aws:iam::<ACCOUNT>:role/<UPLOAD_ROLE>
+        role-to-assume: ${{ secrets.awsIAMS3UploadRole }}
         role-session-name: github-action-account-link-extension-publish
         aws-region: us-west-1