Skip to content

Commit f1ac552

Browse files
fix: Correct IAM role ARN format with double colon
- Fix IAM role ARN format from 'arn:aws:iam:ACCOUNT_ID:role/ROLE_NAME' - to 'arn:aws:iam::ACCOUNT_ID:role/ROLE_NAME' (double colon) - This was causing 'Request ARN is invalid' error in GitHub Actions - Update PowerShell script to generate correct ARN format
1 parent 9517425 commit f1ac552

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

create_role.ps1

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1212,10 +1212,11 @@ if ($GITHUB_CLI_AVAILABLE) {
12121212
Write-Info "IAMロール名: $ROLE_NAME"
12131213

12141214
# PowerShellの文字列展開を確実にする
1215-
$AWS_ROLE_ARN = "arn:aws:iam:$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
1215+
$AWS_ROLE_ARN = "arn:aws:iam::$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
12161216
Write-Info "生成されるARN: $AWS_ROLE_ARN"
12171217
Write-Info "$SECRET_NAMEをRepository Secretsに登録中: $AWS_ROLE_ARN"
1218-
$result = gh secret set $SECRET_NAME --body $AWS_ROLE_ARN 2>&1
1218+
$result = gh variable set $SECRET_NAME --body $AWS_ROLE_ARN 2>&1
1219+
$result = gh secret set $SECRET_NAME --body $AWS_ROLE_ARN 2>&1
12191220
if ($LASTEXITCODE -eq 0) {
12201221
Write-Success "$SECRET_NAME がRepository Secretsに登録されました"
12211222
} else {
@@ -1284,7 +1285,7 @@ Write-Host "AWSアカウントID: $AWS_ACCOUNT_ID"
12841285
Write-Host "GitHubユーザー名: $GITHUB_USERNAME"
12851286
Write-Host "GitHubリポジトリ名: $GITHUB_REPO_NAME"
12861287
Write-Host "IAMロール名: $ROLE_NAME"
1287-
Write-Host "IAMロールARN: arn:aws:iam:$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
1288+
Write-Host "IAMロールARN: arn:aws:iam::$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
12881289
Write-Host ""
12891290

12901291
if ($GITHUB_CLI_AVAILABLE) {
@@ -1302,7 +1303,7 @@ if ($GITHUB_CLI_AVAILABLE) {
13021303
Write-Host ""
13031304
Write-Host "Repository Secrets:" -ForegroundColor Cyan
13041305
Write-Host "Name: $SECRET_NAME"
1305-
Write-Host "Value: arn:aws:iam:$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
1306+
Write-Host "Value: arn:aws:iam::$($AWS_ACCOUNT_ID):role/$($ROLE_NAME)"
13061307
Write-Host "Name: S3_BUCKET"
13071308
Write-Host "Value: $S3_BUCKET"
13081309
Write-Host ""

0 commit comments

Comments
 (0)