Authenticate GitHub Actions with AWS Using OIDC — No Secrets Needed
🔐 Authenticate GitHub Actions with AWS using OIDC — No Access Keys or Secrets Required! Stop storing long-lived AWS Access Keys in GitHub Secrets. In this hands-on DevOps tutorial, learn the modern, secure way to connect GitHub Actions to AWS using OpenID Connect (OIDC). We follow cloud security best practices by using short-lived, token-based authentication that automatically expires.
🚀 What You’ll Learn:
The OIDC Flow: How GitHub and AWS STS exchange tokens securely.
AWS IAM Setup: Configuring an Identity Provider and Trust Policies.
The "No-Secret" Workflow: Writing YAML with permissions: id-token: write.
Troubleshooting: Fixing common "Role Assumption" and "Provider already exists" errors.
Verification: Using aws sts get-caller-identity to confirm connectivity.
⏳ Video Chapters:
00:00 - Introduction: Why OIDC is better than Secrets
00:28 - How OIDC Works (Architecture Diagram)
01:55 - Setting up an IAM User (Baseline for Tutorial)
Note: This user is for demonstration only; OIDC replaces the need for its keys!
03:13 - Configuring AWS IAM Identity Provider
04:22 - Troubleshooting: "Provider Already Exists" Error
04:30 - Creating the IAM Role & Web Identity Trust Policy
06:52 - GitHub Actions Workflow Setup (YAML Walkthrough)
09:18 - Configuring id-token: write Permissions
10:50 - Troubleshooting: Updating GitHub Secrets vs. IAM Roles
13:48 - Running the Connectivity Test
15:42 - Success! Verifying the Caller Identity
16:50 - Final Security Summary & Best Practices
📂 Resources & Code:
👉 Full Blog Post: / authenticate-github-actions-with-aws-using...
👉 GitHub Repo (Example Code): [Insert your Repo Link Here]
👉 AWS Documentation: https://docs.github.com/en/actions/de...
💡 Why use OIDC?
No Static Secrets: No more rotating or leaking AWS Access Keys.
Least Privilege: Scoped access to specific repositories and branches.
Short-Lived: Credentials exist only for the duration of the GitHub job.
#GitHubActions #AWS #OIDC #DevOps #CloudSecurity #NoSecrets #CICD #InfrastructureAsCode #AWSIAM #OpenIDConnect #IntegrationNinjas
In questa pagina del sito puoi guardare il video online Authenticate GitHub Actions with AWS Using OIDC — No Secrets Needed della durata di ore minuti seconda in buona qualità , che l'utente ha caricato Integrations Ninjas 23 giugno 2025, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 5,596 volte e gli è piaciuto 144 spettatori. Buona visione!
![GTA 5 Online - Touch Up Tuesday (Creamsickle Orange, Sky Blue & Blood Orange) [GTA V]](https://image.4k-video.ru/id-video/YSKfV1b36-A)
