able-hair-32695
12/17/2021, 6:43 PMexport function generateGithubOIDCAssumeRolePolicy(params: {
githubOwner: Input<string>;
repositoryName: Input<string>;
oidcProviderArn: Input<string>;
}): Promise<GetPolicyDocumentResult> {
return getPolicyDocument({
statements: [
{
actions: ['sts:AssumeRoleWithWebIdentity'],
conditions: [
{
test: 'StringLike',
values: [`repo:${params.githubOwner}/${params.repositoryName}:*`],
variable: '<http://token.actions.githubusercontent.com:sub|token.actions.githubusercontent.com:sub>',
},
],
principals: [
{
identifiers: [params.oidcProviderArn],
type: 'Federated',
},
],
},
],
});
}
billowy-army-68599