St

Stop Putting AWS Credentials in GitHub Secrets

Hacker News

Stop Putting AWS Credentials in GitHub Secrets

Greetings! I've created a GitHub action that works that allows GitHub Actions to exchange a GitHub token for AWS Access Credentials. I've cultivated a few examples of it in action: https://github.com/saml-to/aws-assume-role-action-examples I've always found management of AWS Credentials has been a pain. So this setting up this Action works like this: 1) A SAML Identity Provider is created in AWS 2) A Role in AWS is set up to trust that Identity Provider 3) A config file is added to the repository indicating which role can be assumed 4) The GitHub Action exchanges the Repo Secret for AWS Credentials using the SAML.to backend for the exchange Let me know what you think! I'm Happy to take questions and comments here or on Gitter: https://gitter.im/saml-to/assume-aws-role-action

Share card

Actual performance

88points
29comments
Made the leaderboard

Launch Intel predictions

Analyze your own launch →
Product HuntOn track for Day 1 leaderboard · Strong signals: using · Missing: mac, agents, macos
60%60% predicted probability of success on Product Hunt, based on ML models trained on real launch data.
best fitHighest predicted score across all platforms for this description.
TrustMRRLess likely to generate early MRR · Strong signals: way · Missing: mobile apps, ios, personal
40%40% predicted probability of success on TrustMRR, based on ML models trained on real launch data.
Indie HackersIH features products with proven revenue · Strong signals: created · Missing: supports, reddit linkedin, podcasting
36%36% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.
Hacker NewsMay not resonate with HN audience · Strong signals: ide, io · Missing: https docs, excited, just released
35%35% predicted probability of success on Hacker News, based on ML models trained on real launch data.
nativeThis product was originally launched on this platform.
AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive
26%26% predicted probability of success on AppSumo, based on ML models trained on real launch data.
Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue
12%12% predicted probability of success on Acquire.com, based on ML models trained on real launch data.
BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto
2%2% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

In
Inject secrets from AWS KMS, SSM, or SecretsManager into your app37%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Inject secrets from AWS KMS, SSM, or SecretsManager into your app

Hacker News2
Ge
Get AWS Credentials in GitHub Codespaces52%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Get AWS Credentials in GitHub Codespaces

Hacker News25
Ds
Dssss – Secure Secrets Management on AWS51%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Dssss – Secure Secrets Management on AWS

Hacker News1
A
A CLI for Using AWS Secrets as ENV Vars29%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A CLI for Using AWS Secrets as ENV Vars

Hacker News3
Ma
Managing AWS Parameter Store Secrets Using a GitHub Action38%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Managing AWS Parameter Store Secrets Using a GitHub Action

Hacker News1
Sy
Synchronize secrets from Bitwarden to GitHub repository secrets54%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Synchronize secrets from Bitwarden to GitHub repository secrets

Hacker News4
A
A AWS Secrets Manager desktop editor67%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A AWS Secrets Manager desktop editor

Hacker News1
Se
Search for exposed secrets on GitHub (back online)49%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Search for exposed secrets on GitHub (back online)

Hacker News4
A
A microservice for splitting and recombining secrets54%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A microservice for splitting and recombining secrets

Hacker News1
Se
Serverless AWS Secrets Plugin50%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Serverless AWS Secrets Plugin

Hacker News2