[alblue]

Another approach, if you are using terraform directly and running in AWS, is to get GitHub Actions to log on to AWS.

While you can do this by embedding an AWS IAM secret as a GitHub secret, it may lead to the secret escaping. Instead, you can configure AWS to trust GitHub actions, And set up passwordless trust between the two.

I wrote up how to do it here at StackOverflow if you’re interested:

https://stackoverflow.com/a/69243572/130659