Skip to content

Commit 21eee58

Browse files
committed
[IT-4658] Setup github OIDC access to bixarena dev account
Create github OIDC access to allow CI deployments from github actions to org-sagebase-bixarena-dev account. depends on #1483
1 parent db2c4ba commit 21eee58

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

org-formation/650-identity-providers/_tasks.yaml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -917,6 +917,28 @@ GithubOidcSynapseStatusLambda:
917917
- !Ref SynapseProdAccount
918918
Region: us-east-1
919919

920+
GithubOidcBixArenaDevInfra:
921+
Type: update-stacks
922+
DependsOn: GithubOidcSageBionetworks
923+
Template: https://raw.githubusercontent.com/Sage-Bionetworks/aws-infra/v0.10.4/templates/IAM/github-oidc-provider.j2
924+
StackName: !Sub ${resourcePrefix}-${appName}-bixarena-dev-infra
925+
Parameters:
926+
ProviderArn: !CopyValue [ !Sub '${resourcePrefix}-${appName}-ProviderArn' ]
927+
ProviderRoleName: !Sub ${resourcePrefix}-${appName}-bixarena-dev-infra
928+
ManagedPolicyArns:
929+
- "arn:aws:iam::aws:policy/AdministratorAccess"
930+
- "arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser"
931+
MaxSessionDuration: 7200
932+
TemplatingContext:
933+
Repositories:
934+
- owner: "Sage-Bionetworks"
935+
name: "sage-monorepo"
936+
branches: ["main"]
937+
DefaultOrganizationBinding:
938+
Account:
939+
- !Ref BixArenaDevAccount
940+
Region: us-east-1
941+
920942
GithubOidcBixArenaInfra:
921943
Type: update-stacks
922944
DependsOn: GithubOidcSageBionetworks

0 commit comments

Comments
 (0)