
GitHub Actions: Security Hardening With OpenID Connect
·772 words·4 mins
The easiest way to configure your CI/CD pipeline with AWS is to just create long-lived credentials, access and secret key, and store them in GitHub Actions.
While this method works, it has several security risks:
