4 ms·
Technically yes. It depends on whether you consider the account ID to be a secret or not (AWS say "sensitive but not secret" which doesn't help much). But als
by regularfry 10mo ago
Technically yes. It depends on whether you consider the account ID to be a secret or not (AWS say "sensitive but not secret" which doesn't help much). But also it can make sense to treat all environment variables as secrets by default just so you don't accidentally end up putting something somewhere that turns out to have been Wrong.
- Kinrany 10mo agoGP is saying that GHA would need zero information about AWS if CodeBuild used a Github token and listened for GHA runs.
- regularfry 10mo agoThat may be true, but it's not what the link describes.
- Kinrany 10mo agoFair!