GitHub Actionsã«AWSクレデンシャルを直接è¨å®šã—ãŸããªã„ã®ã§IAMãƒãƒ¼ãƒ«ã‚’利用ã—ãŸã„ | DevelopersIOã“ã‚“ã«ã¡ã¯ï¼ã‚³ãƒ³ã‚µãƒ«éƒ¨ã®inomaso(@inomasosan)ã§ã™ã€‚ å‰å›žã¨å‰ã€…回ã§GitHub Actionsã‹ã‚‰ECSã®CI/CDã‚„IAMãƒãƒªã‚·ãƒ¼ã®æœ€å°æ¨©é™ä½œæˆã‚’試ã—ã¦ã¿ã¾ã—ãŸã€‚ [åˆå¿ƒè€…å‘ã‘] GitHub Actionsã‹ã‚‰ECS Fargateã«CI/CDã—ã¦ã¿ãŸ GitHub Actionsã‹ã‚‰ECSã¨ECRã¸ã®CI/CDを最å°æ¨©é™ã§å®Ÿè¡Œã—ãŸã„ 今回ã¯GitHub Actionsã§AWSã®ä¸€æ™‚çš„ãªã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«(アクセスã‚ーIDã€ã‚·ãƒ¼ã‚¯ãƒ¬ãƒƒãƒˆã‚¢ã‚¯ã‚»ã‚¹ã‚ー)を利用ã—ãŸã„ã®ã§ã€IAMユーザーã®ä»£ã‚ã‚Šã«OIDCプãƒãƒã‚¤ãƒ€ã¨IAMãƒãƒ¼ãƒ«ã‚’è¨å®šã—ã¦ã„ãã¾ã™ã€‚ IAMユーザーã®ã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã ã¨ãƒ€ãƒ¡ãªã®ï¼Ÿ IAMユーザーã§ç™ºè¡Œã—ãŸã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã¯æ°¸ç¶šçš„ã«åˆ©ç”¨å¯èƒ½ã§ã™ã€‚ GitHubã§ã¯AWSã®ã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã‚’Secretsã«ã‚ˆã‚Šç§˜åŒ¿åŒ–ã§ãã¾ã™ãŒã€AWS外ã®ã‚µãƒ¼ãƒ“スã«æ°¸ç¶šçš„ãªã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«
{{#tags}}- {{label}}
{{/tags}}