chore(analytics): write to Data Lake directly (#5125)

Co-authored-by: Enes <enesozturk.d@gmail.com>

Author: arein

.github/workflows/ui_tests.yml

@@ -74,9 +74,16 @@ on:
         required: false
       PLAYWRIGHT_REPORT_AWS_SECRET_ACCESS_KEY:
         required: false
+      AWS_APPKIT_DATA_LAKE_ROLE_TO_ASSUME:
+        required: false
 
 env:
   BRANCH_NAME: ${{ inputs.branch }}
+  AWS_APPKIT_DATA_LAKE_ROLE_TO_ASSUME: ${{ secrets.AWS_APPKIT_DATA_LAKE_ROLE_TO_ASSUME }}
+
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
   build_lab_and_extension:
@@ -469,13 +476,11 @@ jobs:
           echo "BUILD_CONTEXT=$CONTEXT" >> $GITHUB_ENV
           echo "Derived context: $CONTEXT"
 
-      # TODO: Migrate to OIDC
       - name: Configure AWS Credentials
         if: inputs.build_trigger_type != '' # Also skip if not uploading
         uses: aws-actions/configure-aws-credentials@v4
         with:
-          aws-access-key-id: ${{ secrets.PLAYWRIGHT_REPORT_AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.PLAYWRIGHT_REPORT_AWS_SECRET_ACCESS_KEY }}
+          role-to-assume: ${{ env.AWS_APPKIT_DATA_LAKE_ROLE_TO_ASSUME }}
           aws-region: eu-central-1
 
       # Required for Athena/Trino processing
@@ -487,8 +492,8 @@ jobs:
       - name: Upload Merged JSON Report to S3
         if: inputs.build_trigger_type != '' && always()
         run: |
-          S3_BUCKET="reown.appkit.e2e.reports"
-          S3_PREFIX="appkit/playwright-results"
+          S3_BUCKET="walletconnect.data-lake.prod"
+          S3_PREFIX="appkit-test-results"
           FILE_NAME="merged-test-results.jsonl"
           year=$(date +%Y)
           month=$(date +%m)