updated ci

joeygrable94 · Oct 30, 2024 · 6b85c22 · 6b85c22
1 parent 64dd99b
commit 6b85c22
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -7,6 +7,9 @@ on:
     branches: [ "prod" ]
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
   test:
@@ -78,18 +81,15 @@ jobs:
       CLOUDKEY_AWS_DEFAULT_REGION: ${{ secrets.CLOUDKEY_AWS_DEFAULT_REGION }}
       CLOUDKEY_AWS_S3_DEFAULT_BUCKET: ${{ secrets.CLOUDKEY_AWS_S3_DEFAULT_BUCKET }}
       AWS_GITHUB_OIDC_ROLE_ARN: ${{ secrets.AWS_GITHUB_OIDC_ROLE_ARN }}
-    permissions:
-      id-token: write
-      contents: read
     steps:
       - name: Checkout Source
         uses: actions/checkout@v4
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v3
         with:
-          audience: "sts.amazonaws.com"
-          aws-region: ${{ secrets.CLOUDKEY_AWS_DEFAULT_REGION }}
           role-to-assume: ${{ secrets.AWS_GITHUB_OIDC_ROLE_ARN }}
+          aws-region: ${{ secrets.CLOUDKEY_AWS_DEFAULT_REGION }}
+          audience: "sts.amazonaws.com"
       - name: Setup Python
         uses: actions/setup-python@v5
         with: