Compare commits

..

No commits in common. "6db9f44a471f33c125d35361152ea591eb57432e" and "c040bfaa223ac9a671cca9047cffdac45b00f3dc" have entirely different histories.

2 changed files with 0 additions and 37 deletions

View file

@ -35,10 +35,6 @@ on:
description: "Node.js version for CDK CLI"
type: string
default: "24"
enable-qemu:
description: "Enable QEMU so cdk synth can bundle arm64 Lambda assets on x86 runners"
type: boolean
default: false
run-conventions-check:
description: "Run lightweight conventions audit"
type: boolean
@ -84,10 +80,6 @@ jobs:
with:
node-version: ${{ inputs.node-version }}
- name: Set up QEMU
if: ${{ inputs.run-cdk-synth && inputs.enable-qemu }}
uses: docker/setup-qemu-action@v3
- name: CDK synth
if: ${{ inputs.run-cdk-synth }}
working-directory: ${{ inputs.cdk-dir }}

View file

@ -467,33 +467,6 @@ Resources:
Resource:
- !Sub arn:aws:iam::${AWS::AccountId}:role/cdk-hnb659fds-*
ApmWoAnalysisDeployRole:
Type: AWS::IAM::Role
Properties:
RoleName: githubdeploy-apm-wo-analysis
AssumeRolePolicyDocument:
Version: "2012-10-17"
Statement:
- Effect: Allow
Principal:
Federated: !Sub arn:aws:iam::${AWS::AccountId}:oidc-provider/token.actions.githubusercontent.com
Action: sts:AssumeRoleWithWebIdentity
Condition:
StringEquals:
token.actions.githubusercontent.com:aud: sts.amazonaws.com
StringLike:
token.actions.githubusercontent.com:sub: !Sub repo:${GitHubOrg}/apm-wo-analysis:ref:refs/heads/main
Policies:
- PolicyName: cdk-deploy
PolicyDocument:
Version: "2012-10-17"
Statement:
- Effect: Allow
Action:
- sts:AssumeRole
Resource:
- !Sub arn:aws:iam::${AWS::AccountId}:role/cdk-hnb659fds-*
Outputs:
SamCfnExecutionRoleArn:
Value: !GetAtt SamCfnExecutionRole.Arn
@ -515,5 +488,3 @@ Outputs:
Value: !GetAtt SeahavenDoorUnlockApiDeployRole.Arn
ProcurementIngestDeployRoleArn:
Value: !GetAtt ProcurementIngestDeployRole.Arn
ApmWoAnalysisDeployRoleArn:
Value: !GetAtt ApmWoAnalysisDeployRole.Arn