jbenaventem/"Configure AWS Credentials" Action For GitHub Actions

Configure AWS credential and region environment variables for use with the AWS CLI and AWS SDKs

Trust Signals

workflow.ymlSHA-pinned

uses: jbenaventem/configure-aws-credentials@15fca826eb6baafb021d7de86996bb846c2661c2 # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
aws-access-key-id	AWS Access Key ID. This input is required if running in the GitHub hosted environment. It is optional if running in a self-hosted environment that already has AWS credentials, for example on an EC2 instance.	no	—
aws-secret-access-key	AWS Secret Access Key. This input is required if running in the GitHub hosted environment. It is optional if running in a self-hosted environment that already has AWS credentials, for example on an EC2 instance.	no	—
aws-session-token	AWS Session Token	no	—
aws-region	AWS Region, e.g. us-east-2	yes	—
mask-aws-account-id	Whether to set the AWS account ID for these credentials as a secret value, so that it is masked in logs. Valid values are 'true' and 'false'. Defaults to true	no	—
role-to-assume	Use the provided credentials to assume an IAM role and configure the Actions environment with the assumed role credentials rather than with the provided credentials	no	—
web-identity-token-file	Use the web identity token file from the provided file system path in order to assume an IAM role using a web identity. E.g., from within an Amazon EKS worker node	no	—
role-duration-seconds	Role duration in seconds (default: 6 hours)	no	—
role-session-name	Role session name (default: GitHubActions)	no	—
role-external-id	The external ID of the role to assume	no	—
role-skip-session-tagging	Skip session tagging during role assumption	no	—

name	description
aws-account-id	The AWS account ID for the provided credentials