fix: Resolve PowerShell variable expansion issue in create_role.ps1

- Fix  variable expansion in ARN generation
- Use PowerShell subexpression syntax  for reliable variable expansion
- Add debug information to show AWS account ID and role name
- Fix OIDC provider ARN generation with proper variable expansion
- Ensure ARN format includes account ID: arn:aws:iam:ACCOUNT_ID:role/ROLE_NAME

Author: Hirose-Sebastian-Taikai

create_role.ps1

@@ -951,7 +951,7 @@ Write-Info "既存のOIDCプロバイダーを取得中..."
 $OIDC_PROVIDERS = aws iam list-open-id-connect-providers --query 'OpenIDConnectProviderList[].Arn' --output text 2>$null
 
 # GitHub Actions用のOIDCプロバイダーARN
-$GITHUB_OIDC_ARN = "arn:aws:iam:$AWS_ACCOUNT_ID:oidc-provider/token.actions.githubusercontent.com"
+$GITHUB_OIDC_ARN = "arn:aws:iam:$($AWS_ACCOUNT_ID):oidc-provider/token.actions.githubusercontent.com"
 
 # 選択肢を準備
 Write-Host ""
@@ -1203,7 +1203,12 @@ if ($GITHUB_CLI_AVAILABLE) {
             Write-Info "=== Repository Secretsの登録 ==="
 
             # 環境別AWS_ROLE_ARNの登録
-            $AWS_ROLE_ARN = "arn:aws:iam:$AWS_ACCOUNT_ID:role/$ROLE_NAME"
+            Write-Info "AWSアカウントID: $AWS_ACCOUNT_ID"
+            Write-Info "IAMロール名: $ROLE_NAME"
+            
+            # PowerShellの文字列展開を確実にする
+            $AWS_ROLE_ARN = "arn:aws:iam:$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
+            Write-Info "生成されるARN: $AWS_ROLE_ARN"
             Write-Info "$SECRET_NAMEをRepository Secretsに登録中: $AWS_ROLE_ARN"
             $result = gh secret set $SECRET_NAME --body $AWS_ROLE_ARN 2>&1
             if ($LASTEXITCODE -eq 0) {
@@ -1257,7 +1262,7 @@ Write-Host "AWSアカウントID: $AWS_ACCOUNT_ID"
 Write-Host "GitHubユーザー名: $GITHUB_USERNAME"
 Write-Host "GitHubリポジトリ名: $GITHUB_REPO_NAME"
 Write-Host "IAMロール名: $ROLE_NAME"
-Write-Host "IAMロールARN: arn:aws:iam:$AWS_ACCOUNT_ID:role/$ROLE_NAME"
+Write-Host "IAMロールARN: arn:aws:iam:$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
 Write-Host ""
 
 if ($GITHUB_CLI_AVAILABLE) {
@@ -1273,7 +1278,7 @@ if ($GITHUB_CLI_AVAILABLE) {
     Write-Host ""
     Write-Host "Repository Secrets:" -ForegroundColor Cyan
     Write-Host "Name: $SECRET_NAME"
-    Write-Host "Value: arn:aws:iam:$AWS_ACCOUNT_ID:role/$ROLE_NAME"
+    Write-Host "Value: arn:aws:iam:$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
     Write-Host "Name: S3_BUCKET"
     Write-Host "Value: $S3_BUCKET"
     Write-Host ""