aws/.github/workflows/aws-deploy.yml.fragment

# SECONDARY — AWS parallel; GCP is the primary narrative of this demo.
# Fragment only. Not a workflow in .github/workflows, so the validate workflow does not deploy it.
name: aws-deploy-secondary
on:
  workflow_dispatch:
permissions:
  id-token: write
  contents: read
jobs:
  deploy:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - name: checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
        with:
          role-to-assume: arn:aws:iam::000000000000:role/insights-api-deploy
          aws-region: us-east-1
          role-session-name: cloudops-secondary
      - name: document the update
        run: echo "SECONDARY update-function would run here. make check does not call AWS."