build.yaml

name: Optimized Image Delivery Blog Post

on:
  push:
    branches:
      - main

permissions:
  id-token: write
  contents: read

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
    - name: Check out repository
      uses: actions/checkout@v4

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        role-to-assume: ${{ secrets.ROLE_TO_ASSUME }}
        aws-region: ${{ vars.AWS_REGION }}

    - name: Set up Node.js
      uses: actions/setup-node@v3
      with:
        node-version: 18
        cache: 'npm'

    - name: Install npm dependencies
      run: npm install

    - name: CDK Deploy
      env:
        CDK_DEFAULT_ACCOUNT: ${{ secrets.AWS_ACCOUNT_ID }}
        CDK_DEFAULT_REGION: ${{ vars.AWS_REGION }}
        APEX_DOMAIN: ${{ secrets.APEX_DOMAIN }}
        SUBDOMAIN: ${{ secrets.SUBDOMAIN }}
        STACK_ID: ${{ github.ref_name }}
        TAGS: ${{ vars.STACK_TAGS }}
      run: npx aws-cdk deploy --require-approval never