There was an error while loading. Please reload this page.
1 parent d45cfe8 commit 306234cCopy full SHA for 306234c
1 file changed
.github/actions/configure-release-aws-credentials/action.yml
@@ -23,5 +23,6 @@ runs:
23
aws-region: ${{ inputs.aws-region }}
24
role-to-assume: ${{ inputs.role-to-assume }}
25
role-session-name: ${{ inputs.role-session-name }}
26
- # Short-lived: the job only needs the role briefly to read two secrets.
27
- role-duration-seconds: 300
+ # Kept short: the job only needs the role briefly to read two secrets.
+ # 900s is STS's minimum for assume-role; anything lower is rejected.
28
+ role-duration-seconds: 900
0 commit comments