Stop Putting AWS Credentials in GitHub Secrets
Greetings! I've created a GitHub action that works that allows GitHub Actions to exchange a GitHub token for AWS Access Credentials. I've cultivated a few examples of it in action: https://github.com/saml-to/aws-assume-role-action-examples I've always found management of AWS Credentials has been a pain. So this setting up this Action works like this: 1) A SAML Identity Provider is created in AWS 2) A Role in AWS is set up to trust that Identity Provider 3) A config file is added to the repository indicating which role can be assumed 4) The GitHub Action exchanges the Repo…
Stop Putting AWS Credentials in GitHub Secrets launched on January 18, 2022 with 88 votes, #468 of 2,891 launches that month and more than 90% of that year's launches. The site was still online in September 2026, 4 years on.
In plain words
Stop Putting AWS Credentials in GitHub Secrets is a GitHub Action that exchanges GitHub tokens for AWS access credentials without storing AWS credentials in repository secrets. It uses SAML identity federation to authenticate GitHub Actions workflows to AWS roles. Developers set up a SAML identity provider in AWS, configure a trusted role, and add a repository configuration file. The action then performs the credential exchange through a SAML.to backend, eliminating the need to manage and store AWS credentials directly.
written from the facts on this page · September 2026
From the sources
Assume AWS IAM Roles using SAML.to in GitHub Actions - saml-to/assume-aws-role-action
In the maker’s words, at launch
Greetings! I've created a GitHub action that works that allows GitHub Actions to exchange a GitHub token for AWS Access Credentials. I've cultivated a few examples of it in action: https://github.com/saml-to/aws-assume-role-action-examples I've always found management of AWS Credentials has been a…
Does a similar job
all alternatives →
Saml.to: I've Turned GitHub into a SAML Identity Provider2022 · saml.to · ▲23Assume AWS roles from the command line, GitHub Actions and Codespaces.
- MGManaged GitHub Actions Runners for AWS2024 · ▲117
Hey HN! I'm Jacob, one of the founders of Depot (https://depot.dev), a build service for Docker images, and I'm excited to show what we’ve been working on for the past few months: run GitHub Actions jobs in AWS, orchestrated by Depot! Here's a video demo: https://www.youtube.com/watch?v=VX5Z-k1mGc8, and here’s our blog post: https://depot.dev/blog/depot-github-actions-runners. While GitHub Actions is one of the most prevalent CI providers, Actions is slow, for a few reasons: GitHub uses underpowered CPUs, network throughput for cache and the…
Get AWS Credentials in GitHub Codespaces2022 · github.com · ▲25hey everyone I've written a devcontainer feature that allows you to get AWS credentials for a role in GitHub Codespaces. No copy paste of AWS tokens needed! Let me know what you think!
Encrypted Git hosting should be easy2022 · github.com · ▲99encrypted git on s3. Contribute to nathants/git-remote-aws development by creating an account on GitHub.
Publish from GitHub Actions using multi-factor authentication2022 · github.com · ▲72The backstory about this GitHub Action: I discussed with an open-source maintainer why they publish npm packages from their local machine and do not use CI/CD pipelines. They said publishing should require human intervention and want to continue using multi-factor authentication to publish to the npm registry. This led to building the wait-for-secrets GitHub Action. It prints a URL in the build log and waits for secrets to be entered using a browser. Once entered, the workflow continues, and secrets can be used in future steps. The latest release of "eslint-plugin-react" to the npm…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 25d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 22d ago · openbot.run
Talanoa▲340Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 27d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, January 2022
the whole month →- LA
Life & fun · 2022 · looptap.vasanthv.com
History: Last year I had to replace the tire on my bike, and I was surprised how difficult it was to find a suitable new tire. There were a lot of numbers written on the casing, so I googled what they meant. In the end I was successful, but I didn't want to do the same work again for the next bike after I've forgotten the details. So I wrote this website. Technically, the web page is kept very simple, no frameworks, no templates, no website builder. It uses HTML5, CSS and JavaScript, and it privides a responsive layout for mobile usage. I'm happy to receive feedback. If you have tried the…
Life & fun · 2022 · fahrrad-tools.de
Startup Recipes▲626The ultimate MVP cheat sheet with 60+ startup formulas
Dev tools · 2022 · mvprecipes.com
