diff --git a/.github/workflows/coverage_runner.yml b/.github/workflows/coverage_runner.yml index 9a35f67c79..8c3685b66b 100644 --- a/.github/workflows/coverage_runner.yml +++ b/.github/workflows/coverage_runner.yml @@ -35,6 +35,8 @@ jobs: run-tests: runs-on: ${{ matrix.os }} + permissions: + id-token: write needs: [check_for_membership, python-versions] if: github.event_name == 'push' || needs.check_for_membership.outputs.check-result == 'true' || github.event_name == 'workflow_dispatch' name: Run tests with Python ${{ matrix.python-version }} on ${{ matrix.os }} @@ -78,8 +80,7 @@ jobs: - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 with: - aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + role-to-assume: ${{ secrets.AWS_HAZELCAST_OIDC_GITHUB_ACTIONS_ROLE_ARN }} aws-region: 'us-east-1' - name: Get Secrets diff --git a/.github/workflows/nightly_runner.yml b/.github/workflows/nightly_runner.yml index 18378de104..c35f8bf6a9 100644 --- a/.github/workflows/nightly_runner.yml +++ b/.github/workflows/nightly_runner.yml @@ -10,6 +10,8 @@ jobs: run-tests: needs: python-versions runs-on: ${{ matrix.os }} + permissions: + id-token: write name: Run tests with Python ${{ matrix.python-version }} on ${{ matrix.os }} strategy: matrix: @@ -34,8 +36,7 @@ jobs: - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 with: - aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} - aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + role-to-assume: ${{ secrets.AWS_HAZELCAST_OIDC_GITHUB_ACTIONS_ROLE_ARN }} aws-region: 'us-east-1' - name: Get Secrets uses: aws-actions/aws-secretsmanager-get-secrets@v2