Update cd.yml to use OIDC for AWS authentication

[vikram-chaitanya]

Summary

• Switch production CD workflow from static AWS access keys (AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY) to GitHub OIDC-based authentication using aws-actions/configure-aws-credentials@v4
• Add permissions block for id-token: write and contents: read
• Add AWS_ROLE_ARN and AWS_DEFAULT_REGION to the .env file creation step
• Mirrors the changes already applied to staging-cd.yml

Test plan

• Verify the production deploy workflow triggers correctly on push to main
• Confirm AWS credentials are obtained via OIDC (no static keys needed)
• Validate that build, deploy, and indexing steps complete successfully

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: bc5ae6f5-9686-4521-88d8-e3f0fa25b81f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dev

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}