Configuring AWS credentials not authorized to perform sts:AssumeRoleWithWebIdentity
Summary The GitHub Actions workflow failed to assume an AWS IAM role due to missing trust relationship alignment between the role’s trust policy and the GitHub OIDC provider. Despite the role having sts:AssumeRoleWithWebIdentity permission, the audience and subject conditions in the trust policy did not match the GitHub Actions OIDC token claims. Root Cause Mismatched … Read more