Skip to content

Commit 306234c

Browse files
author
Fabiana Severin
committed
fix(ci): raise OIDC role duration to STS minimum 900s
1 parent d45cfe8 commit 306234c

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

  • .github/actions/configure-release-aws-credentials

.github/actions/configure-release-aws-credentials/action.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,5 +23,6 @@ runs:
2323
aws-region: ${{ inputs.aws-region }}
2424
role-to-assume: ${{ inputs.role-to-assume }}
2525
role-session-name: ${{ inputs.role-session-name }}
26-
# Short-lived: the job only needs the role briefly to read two secrets.
27-
role-duration-seconds: 300
26+
# Kept short: the job only needs the role briefly to read two secrets.
27+
# 900s is STS's minimum for assume-role; anything lower is rejected.
28+
role-duration-seconds: 900

0 commit comments

Comments
 (0)