From f00fc5bace2ce9e5baa5c421a4845c7a786a4138 Mon Sep 17 00:00:00 2001
From: aboyko <aboyko@vmware.com>
Date: Tue, 7 Nov 2023 21:43:58 -0500
Subject: [PATCH] GHA: Try temp credentials from assume-role for upload

---
 .github/workflows/akamai-test.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/akamai-test.yml b/.github/workflows/akamai-test.yml
index 49c2c2ebb..b68158672 100644
--- a/.github/workflows/akamai-test.yml
+++ b/.github/workflows/akamai-test.yml
@@ -18,5 +18,10 @@ jobs:
           file="upload-test.txt"
           echo 'Upload test file' > $file
           cat $file
-          aws sts assume-role --role-arn arn:aws:iam::${{ secrets.TOOLS_CLOUDGATE_ACCOUNT_ID }}:role/${{ secrets.TOOLS_CLOUDGATE_USER }} --role-session-name gha-upload
+          export $(printf "AWS_ACCESS_KEY_ID=%s AWS_SECRET_ACCESS_KEY=%s AWS_SESSION_TOKEN=%s" \
+          $(aws sts assume-role \
+          --role-arn arn:aws:iam::${{ secrets.TOOLS_CLOUDGATE_ACCOUNT_ID }}:role/${{ secrets.TOOLS_CLOUDGATE_USER }} \
+          --role-session-name gha-upload \
+          --query "Credentials.[AccessKeyId,SecretAccessKey,SessionToken]" \
+          --output text))
           aws s3 mv ./$file s3://tools-spring-io/test-akamai/$file --acl public-read --no-progress