actionable-aws-cdk (npm): This allows using Github Actions with an assumed role via an OpenIdConnect proivder - so no static credentials anymore.
Keywords: cdk