DevOps & CI/CD
Bug Report
GitHub Actions OIDC to AWS: Not authorized to perform sts:AssumeRoleWithWebIdentity
Our deploy job worked on main and failed on the production environment with Not authorized to perform sts:AssumeRoleWithWebIdentity. Using a GitHub environment changes the OIDC subject claim. We rewrote the trust policy around exact subjects instead of wildcards.