cfn-publish.yaml

name: Publish CloudFormation Templates

on:
  # Workflow Dispatch can be used to manually trigger a build
  workflow_dispatch:
    branches: [master]
  # Workflow run will trigger build for new commits to master which pass the test workflow
  workflow_run:
    workflows: ["Test CloudFormation Templates"]
    branches: [master]
    types:
      - completed

jobs:
  publish:
    runs-on: ubuntu-latest
    name: Publish ./tools/cloudformation-template
    # Additional permissions required to assume AWS Role on GitHub Hosted runner
    # Allows the JWT to be requested from GitHub's OIDC provider
    permissions:
      id-token: write
    steps:
      - name: Checkout
        uses: actions/checkout@v2

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          role-to-assume: arn:aws:iam::440514240447:role/GitHubActionsFlexeraPublicPolicyTemplatesAccessRole
          aws-region: us-east-2 # flexera-cloudformation-public S3 bucket is in us-east-2
      
      - name:  Copy CloudFormation Templates to S3
        run: |
          aws s3 cp ./tools/cloudformation-template/releases/ s3://flexera-cloudformation-public/ --recursive --exclude "*" --include "*.template" --acl public-read
          aws s3 cp ./tools/cloudformation-template/FlexeraAutomationPolicies.template s3://flexera-cloudformation-public/FlexeraAutomationPolicies_latest.template --acl public-read