Skip to content

Fix description

Fix description #6

name: Deploy PRX-GHA-AccessRole
on:
push:
branches:
- main
paths:
- iam-roles/PRX-GHA-AccessRole/template.yml
concurrency:
group: ${{ github.workflow }}
permissions:
id-token: write
contents: read
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@v4
with:
aws-region: us-east-2
role-to-assume: arn:aws:iam::048723829744:role/PRX-GHA-AccessRole
role-session-name: gha-deploy-gha-accessrole
- name: Deploy to management account
working-directory: iam-roles/PRX-GHA-AccessRole
run: |
aws cloudformation deploy \
--region us-east-2 \
--stack-name PRX-GHA-AccessRole \
--template-file template.yml \
--capabilities CAPABILITY_NAMED_IAM \
--no-fail-on-empty-changeset \
--role-arn arn:aws:iam::048723829744:role/PRX-GHA-ServiceRoleForCloudFormation
- name: Update stack set
working-directory: iam-roles/PRX-GHA-AccessRole
run: |
template_body=$(cat template.yml)
aws cloudformation update-stack-set \
--stack-set-name PRX-GHA-AccessRole \
--capabilities CAPABILITY_NAMED_IAM \
--template-body "$template_body" \
--operation-preferences FailureTolerancePercentage=100,MaxConcurrentPercentage=100,ConcurrencyMode=SOFT_FAILURE_TOLERANCE,RegionConcurrencyType=PARALLEL \
--auto-deployment Enabled=true,RetainStacksOnAccountRemoval=false