catnekaise/Cognito Identity Pool Auth
Use GitHub Actions OIDC access token and get temporary AWS Credentials from an Amazon Cognito Identity Pool.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Sep 3, 2024
- License
- MIT
Pinned Snippet
uses: catnekaise/cognito-idpool-auth@41fcec30f55c069bc59f5773077c37477c743bf6 # v1.0.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| cognito-identity-pool-id | Cognito Identity Pool ID | yes | — |
| auth-flow | Either basic or enhanced | yes | — |
| cognito-identity-provider-name | Name of the Congito Identity Provider Name. Can be used in case custom issuer is configured in GitHub Enterprise Cloud. | no | token.actions.githubusercontent.com |
| audience | Audience | no | cognito-identity.amazonaws.com |
| aws-account-id | AWS Account ID | no | "" |
| aws-region | AWS Region | no | "" |
| role-arn | Custom Role Arn | no | "" |
| role-duration-seconds | Role duration in seconds. (Only available if using AuthFlow basic) | no | 3600 |
| role-session-name | Role Session Name (Only available if using AuthFlow basic) | no | GitHubActions |
| set-as-profile | Set credentials as profile with provided name | no | "" |
| set-in-environment | Set credentials as environment variables | no | "" |
| chain-role-arn | Arn of Role when performing role chaining | no | "" |
| chain-pass-claims | Claims from ID token to pass to the role when performing role chaining. Can also include `repository_name`, which will be calculated. | no | "" |
| chain-set-as-profile | Set credentials as profile with provided name | no | "" |
| chain-set-in-environment | Set role chained credentials as environment variables | no | "" |
| chain-role-duration-seconds | Role duration in seconds for chained role | no | 3600 |
| chain-role-session-name | Role Session Name for chained role session | no | GitHubActions |
Outputs
| name | description |
|---|---|
| aws_access_key_id | AWS Access Key Id |
| aws_secret_access_key | AWS Secret Access Key |
| aws_session_token | AWS Session Name |
| aws_region | AWS Region |
| cognito_identity_oidc_access_token | Cognito Identity OIDC Access Token |