From e6ce9e8611ebaab634c46f66836058f4827a4b6b Mon Sep 17 00:00:00 2001
From: Thomas Sibley <tsibley@fredhutch.org>
Date: Mon, 3 Jun 2024 12:09:25 -0700
Subject: [PATCH] Switch AWS credentials from a long-lived IAM user to
 short-lived OIDC/role sessions

I'll also be removing the corresponding repository secrets.

Related-to: <https://github.com/nextstrain/private/issues/110>
---
 .github/workflows/ingest.yaml       | 2 --
 .github/workflows/phylogenetic.yaml | 2 --
 2 files changed, 4 deletions(-)

diff --git a/.github/workflows/ingest.yaml b/.github/workflows/ingest.yaml
index 9de5d3a..1a455cf 100644
--- a/.github/workflows/ingest.yaml
+++ b/.github/workflows/ingest.yaml
@@ -66,8 +66,6 @@ jobs:
         CONFIG_OVERRIDES: ${{ needs.set_config_overrides.outputs.config_overrides }}
       run: |
         nextstrain build \
-          --env AWS_ACCESS_KEY_ID \
-          --env AWS_SECRET_ACCESS_KEY \
           ingest \
             upload_all \
             --configfile build-configs/nextstrain-automation/config.yaml \
diff --git a/.github/workflows/phylogenetic.yaml b/.github/workflows/phylogenetic.yaml
index 04901b7..a21d8be 100644
--- a/.github/workflows/phylogenetic.yaml
+++ b/.github/workflows/phylogenetic.yaml
@@ -92,8 +92,6 @@ jobs:
         CONFIG_OVERRIDES: ${{ needs.set_config_overrides.outputs.config_overrides }}
       run: |
         nextstrain build \
-          --env AWS_ACCESS_KEY_ID \
-          --env AWS_SECRET_ACCESS_KEY \
           phylogenetic \
             deploy_all \
             --configfile build-configs/nextstrain-automation/config.yaml \