ci: assume wstd-aws-ci-role

Author: pchickey

.github/workflows/ci.yaml

@@ -38,12 +38,27 @@ jobs:
         command: test
         args: -p wstd --target wasm32-wasip2 -- --nocapture
 
+    # pchickey made a role and bucket on his personal aws account
+    # it only provides ListBucket and GetObject for a single bucket
+    - name: Configure AWS Credentials
+      id: creds
+      uses: aws-actions/[email protected]
+      with:
+        aws-region: us-west-2
+        role-to-assume: arn:aws:iam::313377415443:role/wstd-aws-ci-role
+        role-session-name: github-ci
+
     - name: example tests
       uses: actions-rs/cargo@v1
       with:
         command: test
         args: -p test-programs -- --nocapture
-
+        env:
+          AWS_REGION: us-west-2
+          AWS_ACCESS_KEY_ID: ${{ steps.creds.outputs.aws-access-key-id }}
+          AWS_SECRET_ACCESS_KEY: ${{ steps.creds.outputs.aws-secret-access-key }}
+          AWS_SESSION_TOKEN: ${{ steps.creds.outputs.aws-session-token }}
+          WSTD_EXAMPLE_BUCKET: wstd-example-bucket
 
   check_fmt_and_docs:
     name: Checking fmt and docs

aws/.gitignore

@@ -0,0 +1 @@
+.environment