From Dev.to
We replaced our deploy keys with OIDC and every repository in the organisation could deploy our website
Last spring we removed the last long lived AWS keys from GitHub. Each deploy workflow now asks GitHub for an OIDC token, with permissions set to id-token: write, and the configure-aws-credentials acti...