fix: Add token.actions.githubusercontent.com:aud condition (#22)

Adds the token.actions.githubusercontent.com:aud condition. Fixes #21.
unfunco · Feb 16, 2023 · 2dc99c4 · 2dc99c4
1 parent 3be2b1c
commit 2dc99c4
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/data.tf b/data.tf
@@ -30,6 +30,12 @@ data "aws_iam_policy_document" "assume_role" {
       variable = "token.actions.githubusercontent.com:sub"
     }
 
+    condition {
+      test     = "StringLike"
+      values   = ["sts.amazonaws.com"]
+      variable = "token.actions.githubusercontent.com:aud"
+    }
+
     principals {
       identifiers = [local.oidc_provider_arn]
       type        = "Federated"