Use role to upload to s3

NREL · Sep 4, 2024 · 7ec8d49 · 7ec8d49
1 parent 11fbc1a
commit 7ec8d49
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/.github/workflows/docker-openstudio.yml b/.github/workflows/docker-openstudio.yml
@@ -14,6 +14,9 @@ env:
   OPENSTUDIO_SHA: f953b6fcaf
   OPENSTUDIO_VERSION_EXT: ""
 
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   docker:
@@ -76,11 +79,11 @@ jobs:
         path: OpenStudio-${{ env.OPENSTUDIO_VERSION }}${{ env.OPENSTUDIO_VERSION_EXT }}.${{ env.OPENSTUDIO_SHA }}-Apptainer.sif
 
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v4
+      uses: aws-actions/configure-aws-credentials@v3
       with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
         aws-region: ${{ secrets.AWS_DEFAULT_REGION }}
+        role-to-assume: arn:aws:iam::471211731895:role/OpenStudioGitHubActionsRole
+        role-session-name: GitHubActions
 
     - name: Upload artifacts to AWS S3
       uses: usualdesigner/s3-artifact-upload@main