Add permissions to write to CDK asset buckets #7

	on:
	push:
	branches:
	- develop
	- main

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: "20"
	- name: Install dependencies
	run: npm install
	- name: Install CDK
	run: \|
	npm install -g typescript
	npm install -g aws-cdk
	- name: Configure AWS credentials
	uses: aws-actions/configure-aws-credentials@master
	with:
	aws-access-key-id: ${{ secrets.SA_CDK_DEPLOYUSER_AWS_ACCESS_KEY_ID }}
	aws-secret-access-key: ${{ secrets.SA_CDK_DEPLOYUSER_AWS_SECRET_ACCESS_KEY }}
	aws-region: "us-east-2"

	- name: CDK synth
	run: cdk synth --all --require-approval=never

	- name: CDK diff
	run: cdk diff --all --require-approval=never

	- name: CDK deploy
	if: github.ref == 'refs/heads/main'
	run: \|
	npx cdk deploy Sso \
	--parameters instanceArnParam=${{ secrets.SSO_INSTANCE_ARN }} \
	--parameters wmaugManagementAccountNumberParam=${{ secrets.WMAUG_MGMT_ACCOUNT_NUMBER }} \
	--parameters wmaugModeratorAccountNumberParam=${{ secrets.WMAUG_MODERATOR_ACCOUNT_NUMBER }} \
	--parameters wmaugModeratorAdminGroupId=${{ secrets.WMAUG_MODERATOR_ADMIN_GUID }} \
	--parameters wmaugFullAdminGroupId=${{ secrets.WMAUG_MGMT_ADMIN_GUID }} \
	--parameters wmaugMemberAccountNumberParam=${{ secrets.WMAUG_MEMBER_ACCOUNT_NUMBER }} \
	--parameters wmaugMemberAdminGroupId=${{ secrets.WMAUG_MEMBER_ADMIN_GUID }} \
	--parameters wmaugMemberGroupId=${{ secrets.WMAUG_MEMBER_MEMBER_GUID }} \
	--require-approval=never && npx cdk deploy Scp --require-approval=never

Provide feedback