Update aws-actions/configure-aws-credentials action to v5.1.0

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Type	Update	Change
aws-actions/configure-aws-credentials	action	minor	v5.0.0 -> v5.1.0

---

Release Notes

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v5.1.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task —— View job

---

PR Review: AWS Configure Credentials Action Update

Reviewing this Renovate PR that updates aws-actions/configure-aws-credentials from v5.0.0 to v5.1.0.

Todo List:

• Examine the changed workflow file
• Review the specific version change
• Check for potential security or compatibility issues
• Provide review feedback

Review Findings

✅ Change Summary:

• Single line change in .github/workflows/cloudfront.yml:46
• Updated from @v5.0.0 to @00943011d9042930efac3dcd3a170e4273319bc8 # v5.1.0
• Uses commit SHA pinning (security best practice) with human-readable version comment

✅ Security Assessment:

• GOOD: The change uses commit SHA pinning instead of tag references, which is a security best practice
• GOOD: The workflow already uses proper OIDC authentication with id-token: write permissions
• GOOD: Role ARN and region are explicitly configured
• GOOD: Role session duration is limited to 15 minutes (900 seconds)

✅ Compatibility Assessment:

• This is a minor version update (v5.0.0 → v5.1.0)
• No breaking changes expected for minor version bumps
• The action usage pattern remains identical (same inputs and configuration)
• GitHub Actions context and AWS credential setup remain unchanged

✅ Configuration Review:

• Workflow permissions are appropriately scoped (id-token: write, contents: read)
• AWS role assumption follows least-privilege principles
• No sensitive data exposed in the workflow

Recommendation: ✅ APPROVE

This is a straightforward dependency update with no security concerns or breaking changes. The use of commit SHA pinning demonstrates good security practices, and the minor version bump should be safe to merge.