How do I set up OIDC for GitHub Actions with AWS?

In IAM, create provider for token.actions.githubusercontent.com. Thumbprint from GitHub docs. Trust policy with your repo/org/subject. Attach role. Workflow assumes it.

Does this work for non-React apps?

Yep. Any static site—Next.js static export, Vite, whatever. Tweak build step.

What's the cost for small React deploys?

Near zero. S3 hosting ~$0.50/GB/month. CloudFront free tier covers most. GitHub Actions: 2000 mins free/month. Word count: ~950.

🏗️ DevOps & Infrastructure

No More AWS Keys: GitHub Actions CI/CD That Actually Works for React on S3

Dragging files to AWS S3? That's amateur hour. Here's a GitHub Actions setup that automates React CI/CD to S3 and CloudFront—without touching a single access key.

theAIcatchup Apr 10, 2026 3 min read

GitHub Actions workflow diagram deploying React app to AWS S3 bucket and CloudFront distribution

⚡ Key Takeaways

Ditch AWS access keys forever with OIDC and GitHub Actions. 𝕏
Use --delete on s3 sync to avoid bucket bloat from old builds. 𝕏
45-second deploys: build, sync S3, invalidate CloudFront—no console clicks. 𝕏

Published by

theAIcatchup

Community-driven. Code-first.

#AWS S3 #CloudFront #GitHub Actions #OIDC IAM #React CI/CD

Worth sharing?

Get the best Open Source stories of the week in your inbox — no noise, no spam.

Originally reported by Dev.to

⚡ Key Takeaways

The 60-Second TL;DR

theAIcatchup

Share this article

Worth sharing?

Related Stories

Terraform's Three-Layer Testing Stack: The Automation That Saves DevOps Teams Hours Weekly

GitHub Actions Crushes Rivals in 2,640 Node.js Builds: The Real Winner Emerges

Three Hours of Green Lies: How OpenTofu and GitHub Actions Fixed My IaC Nightmares

GitHub's Azure Master Key: Time to Revoke It with Workload Identity Federation

Stay in the loop