aws/auth: Add role-duration-seconds input (#77)

elastic · Jul 3, 2024 · 6227f69 · 6227f69
1 parent 7741e90
commit 6227f69
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 4 deletions.
diff --git a/aws/auth/README.md b/aws/auth/README.md
@@ -12,10 +12,11 @@ AWS role ARN we use for Elastic Observability repositories.
 
 ## Inputs
 <!--inputs-->
-| Name             | Description                    | Required | Default        |
-|------------------|--------------------------------|----------|----------------|
-| `aws-account-id` | The AWS account ID             | `false`  | `697149045717` |
-| `aws-region`     | The AWS region, e.g. us-east-1 | `false`  | `us-east-1`    |
+| Name                    | Description                                                                                                                      | Required | Default        |
+|-------------------------|----------------------------------------------------------------------------------------------------------------------------------|----------|----------------|
+| `aws-account-id`        | The AWS account ID                                                                                                               | `false`  | `697149045717` |
+| `aws-region`            | The AWS region, e.g. us-east-1                                                                                                   | `false`  | `us-east-1`    |
+| `role-duration-seconds` | The assumed role duration in seconds, if assuming a role. Defaults to 1 hour, but cannot exceed the maximum defined by the role. | `false`  | `3600`         |
 <!--/inputs-->
 
 ## Outputs

diff --git a/aws/auth/action.yml b/aws/auth/action.yml
@@ -14,6 +14,10 @@ inputs:
     description: 'The AWS region, e.g. us-east-1'
     required: false
     default: 'us-east-1'
+  role-duration-seconds:
+    description: 'The assumed role duration in seconds, if assuming a role. Defaults to 1 hour, but cannot exceed the maximum defined by the role.'
+    required: false
+    default: '3600'
 
 outputs:
   role-arn:
@@ -52,3 +56,4 @@ runs:
       with:
         aws-region: ${{ inputs.aws-region }}
         role-to-assume: ${{ steps.generate-role-arn.outputs.role-arn }}
+        role-duration-seconds: ${{ inputs.role-duration-seconds }}