Replace access and secret key with assume role (#201)

* Replase access and secret key with assume role

* Replase access and secret key with assume role

* Replace access and secret key with assume role

* Replace access and secret key with assume role

* Replace access and secret key with assume role

Author: mmosarafO2

.github/workflows/deploy-docs-staging.yaml

@@ -7,7 +7,10 @@ on:
 
 jobs:
   deploy:
-    runs-on: ubuntu-latest
+    runs-on: org-openobserve-standard-4
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
     - name: Checkout source code
@@ -34,10 +37,9 @@ jobs:
         fi
 
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@v4
       with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        role-to-assume: arn:aws:iam::325553860333:role/GitHubActionsRole
         aws-region: us-east-2  # or your preferred region
 
     - name: Build MkDocs site

.github/workflows/deploy-docs.yaml

@@ -8,6 +8,9 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
     - name: Checkout source code
@@ -34,10 +37,9 @@ jobs:
         fi
 
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@v4
       with:
-        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        role-to-assume: arn:aws:iam::325553860333:role/GitHubActionsRole
         aws-region: us-west-2  # or your preferred region
 
     - name: Build MkDocs site