GitHub Actionsã«ã€Œå¼·ã„ã€AWSã®æ¨©é™ã‚’渡ã—ãŸã„ ~作戦3 - AssumeRole with Google ID Token ~ - KAYAC engineers' blogã“ã‚“ã«ã¡ã¯ã€‚技術部ã®æ± ç”°ã§ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯ã€Github Actions上ã«ã€Œå¼·ã„ã€AWSã®æ¨©é™ã‚’渡ã™ãŸã‚ã«ä»¥ä¸‹ã®ã“ã¨ã‚’è¡Œã„ã¾ã™ã€‚ App Runnerã§ãŠæ‰‹è»½ã«Google ID Token å–å¾—ã™ã‚‹ãŸã‚ã®Web Applicationã‚’å‹•ã‹ã™ã€‚ Web Applicationã‹ã‚‰å–å¾—ã§ãã‚‹Google ID Tokenã‚’ä¿¡é ¼ã™ã‚‹IAM Roleã«AssumeRoleã™ã‚‹ã€‚ AssumeRoleã«ã‚ˆã£ã¦å¾—られãŸä¸€æ™‚çš„ãªå¼·ã„権é™ã§ã€å¼·ã„権é™ã‚’è¦æ±‚ã™ã‚‹ä½œæ¥(Deploy, Terraform Apply)ã‚’Github Actionsã§è¡Œã†ã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€Github Actions上ã«AWSã®ã‚¢ã‚¯ã‚»ã‚¹ã‚ーを置ã‹ãšã«ã€ã‚る程度安全ãªæ–¹æ³•ã§AWS上ã§ã®å¼·ã„権é™ã‚’è¦æ±‚ã™ã‚‹æ“作を実行ã§ãã¾ã™ã€‚ ãã®ãŸã‚ã€ä¾‹ãˆã°Github Repositoryã«ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã¦ã—ã¾ã£ãŸã¨ã—ã¦ã‚‚ã€AWSã®æœ¬ç•ªç’°
Google SpreadSheetã‚’GitHubã§ãƒãƒ¼ã‚¸ãƒ§ãƒ³ç®¡ç†ã™ã‚‹ãŸã‚ã®ã‚¢ãƒ‰ã‚ªãƒ³Version Oceanをリリースã—ã¾ã—ãŸ
GitHubã®è²·åŽã¨ã‚ªãƒ¼ãƒ—ンソースコミュニティã«ã¤ã„㦠- ã‚‚ã®ãŒãŸã‚Š
Googleã€ã€ŒCloud Source Repositoriesã€æ£å¼å…¬é–‹ã€‚Gitベースã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ç®¡ç†ãƒ„ールã€5ユーザーã€50GBã¾ã§ç„¡æ–™
{{#tags}}- {{label}}
{{/tags}}