fss-post-action.yml

name: Post-Action-Automated-Deploy

# Controls when the action will run. 
on:
  # Triggers the workflow on push or pull request events but only for the main branch
  # push:
  #   branches: [ main ]
    
  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  # This workflow contains a single job called "build"
  build:
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v2

      - name: AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.aws_access_key_id }}
          aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
          aws-region: us-east-1

      - name: Setup Python
        uses: actions/setup-python@v2
        with:
          python-version: 3.8

      # Runs a single command using the runners shell
      - name: Run The fss-post-actions.sh script and Deploy the File Storage Security Post Action Capability
        working-directory: ./Post-Actions
        run: ./fss-post-actions.sh
        env:
          allinone_stackname: ${{ secrets.allinone_stackname }}
          bucket_to_promote_name: ${{ secrets.bucket_to_promote_name}}
          bucket_to_quarantine_name: ${{ secrets.bucket_to_quarantine_name }}
          function_name: ${{ secrets.function_name }}
          bucket_to_scan_arn: ${{ secrets.bucket_to_scan_arn }}
          bucket_to_promote_arn: ${{ secrets.bucket_to_promote_arn }}
          bucket_to_quarantine_arn: ${{ secrets.bucket_to_quarantine_arn }}