Ravi Sir's Cards › AWS
GitHub Actions with OIDC
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Storing AWS keys in GitHub secrets means long-lived keys that anyone with repo admin can misuse.
What is it?
GitHub issues an OIDC token. AWS trusts it and returns short STS credentials.
AssumeRoleWithWebIdentity
How to do it
Add provider token.actions.githubusercontent.com → role with sub condition repo:org/repo:ref:refs/heads/main.
Example
Workflow: permissions id-token: write + aws-actions/configure-aws-credentials with role-to-assume.
id-token: write