Using the production environment #2

	name: Deploy to Lambda

	on:
	push:
	branches:
	- main

	jobs:
	deploy:
	runs-on: ubuntu-latest
	environment: production
	permissions:
	id-token: write
	contents: read

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Configure AWS credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
	aws-region: ${{ vars.AWS_REGION }}

	- name: Login to Amazon ECR
	id: login-ecr
	uses: aws-actions/amazon-ecr-login@v2

	- name: Build, tag, and push image to ECR
	id: build-image
	env:
	ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
	ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY }}
	IMAGE_TAG: ${{ github.sha }}
	run: \|
	docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
	docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:latest .
	docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
	docker push $ECR_REGISTRY/$ECR_REPOSITORY:latest
	echo "image=$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG" >> $GITHUB_OUTPUT

	- name: Update Lambda function
	run: \|
	aws lambda update-function-code \
	--function-name ${{ vars.LAMBDA_FUNCTION_NAME }} \
	--image-uri ${{ steps.build-image.outputs.image }}

Provide feedback