Use env var for AWS_ACCOUNT_ID

Lissy93 · Sep 2, 2023 · b1f8c01 · b1f8c01
1 parent 76cce7e
commit b1f8c01
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 11 deletions.
diff --git a/.github/workflows/deploy-aws.yml b/.github/workflows/deploy-aws.yml
@@ -51,6 +51,7 @@ jobs:
       env:
         AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
         AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
       run: serverless deploy
 
     - name: Update GitHub deployment status (API)

diff --git a/serverless.yml b/serverless.yml
@@ -21,17 +21,17 @@ provider:
       Action:
         - ssm:GetParameter
       Resource:
-        - arn:aws:ssm:us-east-1:590320761284:parameter/GOOGLE_CLOUD_API_KEY
-        - arn:aws:ssm:us-east-1:590320761284:parameter/TORRENT_IP_API_KEY
-        - arn:aws:ssm:us-east-1:590320761284:parameter/SECURITY_TRAILS_API_KEY
-        - arn:aws:ssm:us-east-1:590320761284:parameter/BUILT_WITH_API_KEY
-        - arn:aws:ssm:us-east-1:590320761284:parameter/URL_SCAN_API_KEY
-        - arn:aws:ssm:us-east-1:590320761284:parameter/TRANCO_USERNAME
-        - arn:aws:ssm:us-east-1:590320761284:parameter/TRANCO_API_KEY
-        - arn:aws:ssm:us-east-1:590320761284:parameter/CLOUDMERSIVE_API_KEY
-        - arn:aws:ssm:us-east-1:590320761284:parameter/CHROME_PATH
-        - arn:aws:ssm:us-east-1:590320761284:parameter/API_TIMEOUT_LIMIT
-        - arn:aws:ssm:us-east-1:590320761284:parameter/API_CORS_ORIGIN
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/GOOGLE_CLOUD_API_KEY
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/TORRENT_IP_API_KEY
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/SECURITY_TRAILS_API_KEY
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/BUILT_WITH_API_KEY
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/URL_SCAN_API_KEY
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/TRANCO_USERNAME
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/TRANCO_API_KEY
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/CLOUDMERSIVE_API_KEY
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/CHROME_PATH
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/API_TIMEOUT_LIMIT
+        - arn:aws:ssm:us-east-1:${env:AWS_ACCOUNT_ID}:parameter/API_CORS_ORIGIN
 functions:
   archives:
     handler: api/archives.handler