feat: set up SSE-KMS in S3 [Athena] #59
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ===================================================================================== # | |
| # GitHub Actions configuration file for an AWS Glue ETL application # | |
| # # | |
| # This workflow will: # | |
| # 1. Create AWS resources for the QA environment using Terraform. # | |
| # ===================================================================================== # | |
| name: on IaC PR against [dev] | |
| on: | |
| pull_request: | |
| branches: [dev] | |
| paths: | |
| - ".github/workflows/on-iac-*.yaml" | |
| - "infrastructure/**" | |
| jobs: | |
| # ===================================================================================== # | |
| # CREATE THE AWS RESOURCES FOR THE QA ENVIRONMENT # | |
| # ===================================================================================== # | |
| terraform-qa-infrastructure: | |
| environment: quality-assurance | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write # This is required for requesting the JWT | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v3 | |
| with: | |
| role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/GlueCICDGitHubActionsServiceRole | |
| aws-region: ${{ vars.AWS_REGION }} | |
| - uses: hashicorp/setup-terraform@v2 | |
| - name: Terraform style check | |
| run: terraform fmt -check -recursive ./infrastructure | |
| - name: Terraform validate | |
| run: terraform -chdir=./infrastructure validate | |
| - name: Terraform init | |
| run: terraform -chdir=./infrastructure/environments/qa init -input=false | |
| - name: Terraform plan | |
| run: terraform -chdir=./infrastructure/environments/qa plan -input=false | |
| - name: Terraform apply | |
| run: terraform -chdir=./infrastructure/environments/qa apply -input=false -auto-approve |