I want to allow all github org in aws iam role trusted entity (OIDC)

0

I want to create OIDC auth with aws. While creating role i have to enter github org in in aws iam role trusted entity. I do not have github org to enter so i want to allow all github org. So how can i do this?

Enter image description here

Divya42
gefragt vor 2 Monaten96 Aufrufe
1 Antwort
2

AWS does not provide the capability to assume a role from ANY GitHub organization. Even if you create a trusted policy like this:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Federated": "arn:aws:iam::50********80:oidc-provider/token.actions.githubusercontent.com"
            },
            "Action": "sts:AssumeRoleWithWebIdentity",
            "Condition": {
                "StringEquals": {
                    "token.actions.githubusercontent.com:sub": "repo:*",
                    "token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
                }
            }
        }
    ]
}

GitHub workflow will not be able to assume such a role.

You can create a Free GitHub organization and use it

Enter image description here Enter image description here Enter image description here

profile picture
EXPERTE
beantwortet vor 2 Monaten
profile picture
EXPERTE
Artem
überprüft vor einem Monat

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen