Skip to content

Commit 1ad9dba

Browse files
Per review, add a comment as to why we are using non-prod creds to pull SSM params.
1 parent 876c229 commit 1ad9dba

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

.github/workflows/release-and-deploy-bfd.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,8 @@ jobs:
4848

4949
- name: Get role ARN
5050
id: get-role-arn
51+
# It doesn't matter whether we use prod or non-prod account here as either works.
52+
# Common platform SSM parameters (such as Webhook URLs) exist in both accounts.
5153
run: |
5254
role_arn="${{ secrets.NON_PROD_ACCOUNT_GHA_ROLE_ARN }}"
5355
echo "::add-mask::$role_arn"
@@ -142,6 +144,8 @@ jobs:
142144
steps:
143145
- name: Get role ARN
144146
id: get-role-arn
147+
# It doesn't matter whether we use prod or non-prod account here as either works.
148+
# Common platform SSM parameters (such as Webhook URLs) exist in both accounts.
145149
run: |
146150
role_arn="${{ secrets.NON_PROD_ACCOUNT_GHA_ROLE_ARN }}"
147151
echo "::add-mask::$role_arn"

0 commit comments

Comments
 (0)