fix: use aws profiles for publishing migrations

Author: darora

.github/workflows/publish-migrations.yml

@@ -18,26 +18,38 @@ jobs:
         run: cat $(ls -1) > ../migration-output.sql
         working-directory: ${{ github.workspace }}/migrations/db/migrations
 
-      - name: Push migration files to S3
-        uses: jakejarvis/s3-sync-action@master
+      - name: configure aws credentials - staging
+        uses: aws-actions/configure-aws-credentials@v1
         with:
-          args: --delete
+          role-to-assume: ${{ secrets.DEV_AWS_ROLE }}
+          aws-region: "ap-southeast-1"
+
+      - name: Deploy to S3 staging
+        shell: bash
+        run: aws s3 sync migrations/db s3://$AWS_S3_BUCKET/migrations/db --delete
         env:
           AWS_S3_BUCKET: ${{ secrets.PG_INIT_SCRIPT_S3_BUCKET_STAGING }}
-          AWS_ACCESS_KEY_ID: ${{ secrets.PG_INIT_SCRIPT_ACCESS_KEY_ID_STAGING }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.PG_INIT_SCRIPT_SECRET_ACCESS_KEY_STAGING }}
-          AWS_REGION: ap-southeast-1
-          SOURCE_DIR: migrations/db
-          DEST_DIR: migrations/db
-
-      - name: Push migration files to S3
-        uses: jakejarvis/s3-sync-action@master
+
+      # - name: Push migration files to S3
+      #   uses: jakejarvis/s3-sync-action@master
+      #   with:
+      #     args: --delete
+      #   env:
+      #     AWS_S3_BUCKET: ${{ secrets.PG_INIT_SCRIPT_S3_BUCKET_STAGING }}
+      #     AWS_ACCESS_KEY_ID: ${{ secrets.PG_INIT_SCRIPT_ACCESS_KEY_ID_STAGING }}
+      #     AWS_SECRET_ACCESS_KEY: ${{ secrets.PG_INIT_SCRIPT_SECRET_ACCESS_KEY_STAGING }}
+      #     AWS_REGION: ap-southeast-1
+      #     SOURCE_DIR: migrations/db
+      #     DEST_DIR: migrations/db
+
+      - name: configure aws credentials - staging
+        uses: aws-actions/configure-aws-credentials@v1
         with:
-          args: --delete
+          role-to-assume: ${{ secrets.PROD_AWS_ROLE }}
+          aws-region: "ap-southeast-1"
+
+      - name: Deploy to S3 staging
+        shell: bash
+        run: aws s3 sync migrations/db s3://$AWS_S3_BUCKET/migrations/db --delete
         env:
           AWS_S3_BUCKET: ${{ secrets.PG_INIT_SCRIPT_S3_BUCKET_PROD }}
-          AWS_ACCESS_KEY_ID: ${{ secrets.PG_INIT_SCRIPT_ACCESS_KEY_ID_PROD }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.PG_INIT_SCRIPT_SECRET_ACCESS_KEY_PROD }}
-          AWS_REGION: ap-southeast-1
-          SOURCE_DIR: migrations/db
-          DEST_DIR: migrations/db