Skip to content

Conversation

@bentoluizv
Copy link
Contributor

Enhance the IAM role for GitHub Actions by adding permissions specific to the certified-builder-app-py repository.

@github-actions
Copy link

github-actions bot commented Dec 2, 2025

Terraform Plan (dev)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

@github-actions
Copy link

github-actions bot commented Dec 2, 2025

Terraform Plan (shared)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_iam_role.github_actions_assume_role will be updated in-place
  ~ resource "aws_iam_role" "github_actions_assume_role" {
      ~ assume_role_policy    = jsonencode(
          ~ {
              ~ Statement = [
                  ~ {
                      ~ Condition = {
                          ~ StringLike   = {
                              ~ "token.actions.githubusercontent.com:sub" = "repo:PythonFloripa/certified-builder-infra-py:*" -> [
                                  + "repo:PythonFloripa/certified-builder-infra-py:*",
                                  + "repo:PythonFloripa/certified-builder-app-py:*",
                                ]
                            }
                            # (1 unchanged attribute hidden)
                        }
                        # (3 unchanged attributes hidden)
                    },
                ]
                # (1 unchanged attribute hidden)
            }
        )
        id                    = "github-actions-assume-role"
        name                  = "github-actions-assume-role"
        tags                  = {}
        # (11 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

@bentoluizv bentoluizv merged commit 4c703eb into main Dec 2, 2025
2 checks passed
@maxsonferovante maxsonferovante deleted the add-certified-builder-app-py-repo-to-iam-gha-role branch December 6, 2025 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants