Remove expense-approval-bot OIDC deploy role (#23)

Expense bot merged into payments-dashboard (PR #28). The standalone
stack and repo are being archived.

oidc-deploy-roles.yaml

@@ -72,7 +72,7 @@ Resources:
                 Resource: "*"
 
   # ---------------------------------------------------------------------------
-  # SAM deploy roles (5 repos)
+  # SAM deploy roles (6 repos)
   # ---------------------------------------------------------------------------
 
   AfterhoursShiftManagerDeployRole:
@@ -145,10 +145,10 @@ Resources:
                 Resource:
                   - !GetAtt SamCfnExecutionRole.Arn
 
-  ExpenseApprovalBotDeployRole:
+  FrontIntegrationsDeployRole:
     Type: AWS::IAM::Role
     Properties:
-      RoleName: githubdeploy-expense-approval-bot
+      RoleName: githubdeploy-front-integrations
       AssumeRolePolicyDocument:
         Version: "2012-10-17"
         Statement:
@@ -160,7 +160,7 @@ Resources:
               StringEquals:
                 token.actions.githubusercontent.com:aud: sts.amazonaws.com
               StringLike:
-                token.actions.githubusercontent.com:sub: !Sub repo:${GitHubOrg}/expense-approval-bot:ref:refs/heads/main
+                token.actions.githubusercontent.com:sub: !Sub repo:${GitHubOrg}/front-integrations:ref:refs/heads/main
       Policies:
         - PolicyName: sam-deploy
           PolicyDocument:
@@ -180,7 +180,7 @@ Resources:
                   - cloudformation:CreateStack
                   - cloudformation:TagResource
                 Resource:
-                  - !Sub arn:aws:cloudformation:us-east-1:${AWS::AccountId}:stack/expense-approval-bot/*
+                  - !Sub arn:aws:cloudformation:us-east-1:${AWS::AccountId}:stack/front-integrations/*
               - Effect: Allow
                 Action:
                   - cloudformation:GetTemplateSummary
@@ -571,8 +571,8 @@ Outputs:
       Name: github-cfn-execution-role-arn
   AfterhoursShiftManagerDeployRoleArn:
     Value: !GetAtt AfterhoursShiftManagerDeployRole.Arn
-  ExpenseApprovalBotDeployRoleArn:
-    Value: !GetAtt ExpenseApprovalBotDeployRole.Arn
+  FrontIntegrationsDeployRoleArn:
+    Value: !GetAtt FrontIntegrationsDeployRole.Arn
   AfiBackupMonitorDeployRoleArn:
     Value: !GetAtt AfiBackupMonitorDeployRole.Arn
   RingScheduler3cxDeployRoleArn: