vechain-kit/.github/workflows/deploy-api-lambda.yaml at main · vechain/vechain-kit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
name: Deploy Embedded Wallet Details Stack

on:
    push:
        branches:
            - main
        paths: ['lambda/**', '!lambda/tests/**', '.github/workflows/deploy-api-lambda.yaml']

permissions: {}

jobs:
  deploy:
    permissions:
      contents: read
      id-token: write
    runs-on: ubuntu-latest
    env:
        AWS_REGION: ap-northeast-3
    steps:
        - name: Checkout
          uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

        - name: Configure AWS credentials
          uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
          with:
              role-to-assume: ${{ secrets.AWS_ACC_ROLE }}
              aws-region: ${{ env.AWS_REGION }}

        - name: Setup SAM CLI
          uses: aws-actions/setup-sam@c2a20b1822cc4a6bc594ff7f1dbb658758e383c3 # v2
          with:
              use-installer: true
              token: ${{ secrets.GITHUB_TOKEN }}

        - name: Build and deploy Get Embedded Wallet Details Lambda
          run: |
            cd lambda
            sam build
            sam deploy \
                --stack-name EmbeddedWalletStack \
                --region ${{ env.AWS_REGION }} \
                --capabilities CAPABILITY_IAM \
                --no-fail-on-empty-changeset \
                --parameter-overrides "PrivyAppId=${{ secrets.NEXT_PUBLIC_PRIVY_APP_ID }} PrivyAppSecret=${{ secrets.NEXT_PUBLIC_PRIVY_APP_SECRET }}  UserCheckApiKey=${{ secrets.USERCHECK_API_KEY }} CertificateArn=${{ secrets.CERTIFICATE_ARN }} HostedZoneId=${{ secrets.HOSTED_ZONE_ID }} DomainName=${{ secrets.DOMAIN_NAME }}"