Support for temporary credential with OIDC

[eedygreen]

This should be in gist but no other place to put it.

This action supports the use of OIDC for authentication

Instead of the AWS Access KEY, which inherits human flaws and cannot be whitelisted

uses: appleboy/lambda-action@v0.2.0
      with:
        aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws_region: ${{ secrets.AWS_REGION }}
        function_name: gorush
        zip_file: output.zip
        dry_run: true

With OIDC/AUTH2, granular permissions can be given with temporary access.

The example below shows the action used with OIDC support.

  - name: Configure AWS credentials
    uses: aws-actions/configure-aws-credentials@v4
    with:
      role-to-assume: arn:aws:iam::${{ secrets.awsAccountId }}:role/github-actions-oidc-role 
      aws-region: ${{ secrets.AWS_REGION }}

  - name: Deploy function
    uses: appleboy/lambda-action@v0.2.0
    with:
      function_name: function_name
      zip_file: funciton.zip
      aws_region: region_name