deploy.yml

name: Deploy using CDK

on:
  push:
    branches:
      - main
    paths:
      - "devops/**"
  workflow_dispatch:

permissions:
  id-token: write # Required for OIDC
  contents: read # Required to checkout the repository

env:
  AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
  AWS_REGION: ${{ secrets.AWS_REGION }}
  SSO_INSTANCE_ARN: ${{ secrets.SSO_INSTANCE_ARN }}
  GITHUB_ORG_NAME: ${{ github.repository_owner }}

jobs:
  diff:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::${{ env.AWS_ACCOUNT_ID }}:role/github-actions-role
          aws-region: ${{ env.AWS_REGION }}

      - name: Install dependencies
        run: npm ci

      - name: CDK Diff
        run: npm run cdk:diff

      - name: Deploy Changes
        run: npm run cdk:deploy