Openid Connect

GitHub Actions: Security Hardening With OpenID Connect

6 March 2025·772 words·4 mins

Github Actions Openid Connect Aws Ci/Cd Security Iam Devops Enterprise Security Security Hardening

The easiest way to configure your CI/CD pipeline with AWS is to just create long-lived credentials, access and secret key, and store them in GitHub Actions. While this method works, it has several security risks:

↑