-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
2
-
False
-
-
False
-
Not Selected
-
rhel-container-tools
-
-
-
RUN 284
Summary: Execute Dry Run to Verify AWS OIDC Authentication Description: Run a test execution of the updated pipeline to verify that the OIDC handshake is successful and the correct IAM role is assumed. This validates the removal of long-lived access keys.
Tasks:
- Add a temporary debugging step (or use a dry-run script) to run aws sts get-caller-identity.
- Trigger the workflow manually or via a test branch push.
- Analyze the build logs to confirm the connection succeeded without Access Key ID/Secret Access Key inputs.
- Verify the output ARN matches the expected Role ARN.
Acceptance Criteria:
- [ ] The workflow completes the "Configure AWS Credentials" step successfully.
- [ ] aws sts get-caller-identity returns the expected assumed-role ARN.
- [ ] Build logs confirm no legacy environment variables (AWS_ACCESS_KEY_ID) are being used.