I’ll introduce a reference article about how GitHub Actions can now use IAM Roles and Identity Provider IAM roles without passing AWS Credentials directly.

• GitHub ActionsでAWSの永続的なクレデンシャルを渡すことなくIAM Roleが利用できるようになったようです | DevelopersIO

That’s all from the Gemba on wanting to use GitHub Actions + AWS securely.