name: Deploy to Staging on: push: branches: [main] permissions: id-token: write contents: read jobs: deploy: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: aws-actions/configure-aws-credentials@v4 with: role-to-assume: arn:aws:iam::123456789012:role/GitHubActionsStagingRole aws-region: us-east-1 - name: Deploy to ECS run: aws ecs update-service --cluster staging --service api --force-new-deployment