Project dossier

Implementation is getting faster but the org around it moves at the same speed as always and…

I have been aggressively migrating from AWS permanent credentials to OIDC in GitHub Actions, mainly for deploying to ECS. I know GitHub Actions were supporting OIDC for a while now. But the pressure on compliance is the reason for this migration. If you are new to OpenID Connect (OIDC), it allows GitHub runners to mint short-lived (15–60 min) STS tokens on-the-fly with zero stored secrets . Here’s a quick breakdown of how it works, the Terraform/OpenTofu setup, and the subtle gotchas that I face