updated ci

.github/workflows/ci.yml

@@ -7,13 +7,12 @@ on:
     branches: [ "prod" ]
   workflow_dispatch:
 
-permissions:
-  id-token: write
-  contents: read
-
 jobs:
   test:
     runs-on: ${{ matrix.os }}
+    permissions:
+      id-token: write
+      contents: read
     environment: GCAPI-Backend
     strategy:
       fail-fast: true
@@ -84,6 +83,11 @@ jobs:
     steps:
       - name: Checkout Source
         uses: actions/checkout@v4
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: ${{ secrets.CLOUDKEY_AWS_DEFAULT_REGION }}
+          role-to-assume: ${{ secrets.AWS_GITHUB_OIDC_ROLE_ARN }}
       - name: Setup Python
         uses: actions/setup-python@v5
         with:
@@ -95,11 +99,6 @@ jobs:
           && python -m pip install poetry \
           && poetry config virtualenvs.create false \
           && poetry install --no-root
-      - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v4
-        with:
-          aws-region: ${{ secrets.CLOUDKEY_AWS_DEFAULT_REGION }}
-          role-to-assume: ${{ secrets.AWS_GITHUB_OIDC_ROLE_ARN }}
       - name: Load AWS Account
         run: aws sts get-caller-identity
       - name: Run Python Tests