main.yml

name: Deploy to AWS

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
      actions: read

    steps:
    - name: Checkout repository
      uses: actions/checkout@v2

    - name: Set up Python
      uses: actions/setup-python@v2
      with:
        python-version: '3.9'
    - name: Set up Terraform
      uses: hashicorp/setup-terraform@v1
    
    - name: Initialize Terraform
      run: terraform init
      working-directory: ./src/deployment

    - name: Export AWS Credentials
      run: |
        echo "Exporting AWS credentials..."
        echo "AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}" >> $GITHUB_ENV
        echo "AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }}" >> $GITHUB_ENV

    - name: Terraform Init
      run: terraform init
      working-directory: ./src/deployment

    - name: Terraform Plan
      run: terraform plan
      working-directory: ./src/deployment

    - name: Terraform Apply
      run: terraform apply -auto-approve
      working-directory: ./src/deployment
      env:
        TF_VAR_confirm: "yes" # Automatically confirm the apply