AWS OIDC

Practical GitHub Actions OIDC Setup for AWS: Configuration Tips and Common Pitfalls

I'm migrating GitHub Actions deployments to AWS from long-lived IAM credentials to short-lived OIDC-based access, primarily for ECS deployments. OIDC lets a workflow request a temporary JWT and…

GitHub Actions OIDC Role Assumption Fails Despite Correct Environment Subject Claim

My production GitHub Actions pipeline assumes an AWS IAM role through OIDC so it can push images to ECR, but STS returns "Not authorized to perform sts:AssumeRoleWithWebIdentity." The…