Comments (6)
cc @tbeseda, could you verify this will work for Arc?
Hey, yeah this definitely works 👍
I created a test repo here https://github.com/tbeseda/arc-gha-aws-oidc
The deployed app is live here https://b5haybpklc.execute-api.us-west-2.amazonaws.com/ (not Remix, just a Node fn)
Easier is definitely better :)
This approach is great, IMO. but I'm not sure how to express the process to the developer. It involves creating a couple IAM resources; probably easiest to do by deploying a CloudFormation stack (like @thdxr's example above), which can be done from the AWS Console or with the aws CLI.
I'll talk to folks on the Arc team to see how this step could be streamlined for a grunge-stack user.
from grunge-stack.
That's great! Easier is definitely better :)
cc @tbeseda, could you verify this will work for Arc?
I'd definitely be open to a PR for this if it works well :)
from grunge-stack.
I took the approach of setting up a one-time GitHub actions job in the repo that performs the bootstrapping.
The solution looks something like this.
- Create a new project with grunge-stack, the GitHub workflow is already there.
- Trigger the workflow manually by entering credentials that have privileges to create OIDC providers.
- Use the role to assume the creds in the deploy actions
Source: https://dev.to/simonireilly/secure-aws-cdk-deployments-with-github-actions-3jfk
I've done so with the AWS CDK but that just makes cloudformation under the hood 👍
from grunge-stack.
I considered a PR but I imagine you'd want to would want to figure out how to do some of this stuff automatically (and should maybe be handled in arc?) so figured I'd leave it up to you all for design
from grunge-stack.
This issue has been automatically marked stale because we haven't received a response from the original author in a while 🙈. This automation helps keep the issue tracker clean from issues that are not actionable. Please reach out if you have more information for us or you think this issue shouldn't be closed! 🙂 If you don't do so within 7 days, this issue will be automatically closed.
from grunge-stack.
This issue has been automatically closed because we didn't hear anything from the original author after the previous notice.
from grunge-stack.
Related Issues (20)
- LiveReload does not work HOT 1
- Starting project is throwing Error [ERR_PACKAGE_PATH_NOT_EXPORTED] error HOT 2
- "Lambda handler not found" error due to change in `@architect/architect` v10.6.0 HOT 4
- Setup fails HOT 2
- 🚀 Fresh Stack Deployment Not Working As Expected HOT 2
- Loading notes locally takes 900ms in grunge stack compared to 30ms in indie HOT 1
- remix defer is malfunctioning by awaiting and blocking responses HOT 4
- Fresh unaltered template will not deploy with Github Actions HOT 2
- Cypress smoke test fails with newly initialized project HOT 1
- @prisma/client did not initialize yet HOT 1
- Fresh deployment leads to Internal Server Error HOT 1
- Error occurs after fresh installation HOT 1
- notes example app is slow
- 401 Unauthorized at localhost. Clerk error integration HOT 10
- remix grunge stack aws HOT 4
- NPM Fails to Install dependencies HOT 3
- Logout route is not destroying the user session HOT 2
- Installation fails HOT 1
- Updating grunge-stack to lastest versions HOT 5
- Migrate to use Remix Vite HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from grunge-stack.