From 247833c61fc64efb79d29992cd28b1700b10d2d4 Mon Sep 17 00:00:00 2001
From: Amy Stamile <astamile@usgs.gov>
Date: Wed, 26 Jun 2024 11:44:56 -0700
Subject: [PATCH] add aws-access-key

---
 .github/workflows/codebuild.yml | 40 +++++++++++++++++----------------
 1 file changed, 21 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/codebuild.yml b/.github/workflows/codebuild.yml
index 3506f4fcc2..6cebb30210 100644
--- a/.github/workflows/codebuild.yml
+++ b/.github/workflows/codebuild.yml
@@ -15,25 +15,27 @@ jobs:
       - name: Set AWS credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:
-         aws-region: us-west-2
-         inline-session-policy: >-
-          {
-            "Version": "2012-10-17",
-            "Statement": [
-              {
-                "Effect": "Allow",
-                "Action": ["codebuild:StartBuild", "codebuild:BatchGetBuilds"],
-                "Resource": ["arn:aws:codebuild:us-west-2:950438895271:project/IsisCodeBuild-52nifRxFNgrA"]
-              },
-              {
-                "Effect": "Allow",
-                "Action": ["logs:GetLogEvents"],
-                "Resource": [
-                  "arn:aws:logs:us-west-2:950438895271:log-group:isisbuild-cloudwatch:*"
-                ]
-              }
-            ]
-          }
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: us-west-2
+          inline-session-policy: >-
+            {
+              "Version": "2012-10-17",
+              "Statement": [
+                {
+                  "Effect": "Allow",
+                  "Action": ["codebuild:StartBuild", "codebuild:BatchGetBuilds"],
+                  "Resource": ["arn:aws:codebuild:us-west-2:950438895271:project/IsisCodeBuild-52nifRxFNgrA"]
+                },
+                {
+                  "Effect": "Allow",
+                  "Action": ["logs:GetLogEvents"],
+                  "Resource": [
+                    "arn:aws:logs:us-west-2:950438895271:log-group:isisbuild-cloudwatch:*"
+                  ]
+                }
+              ]
+            }
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
         with: