While renewing GitHub Actions SSL certificates, an unexpected change in the intermediate certificate authority broke workflows using Open ID Connect (OIDC) based deployment to AWS.
To fix the issue please follow the following steps:
- In the AWS Console, go to
- Open the provider(s) for token.actions.githubusercontent.com
- Add the thumbprint
We’re continuing to investigate, to ensure this issue does not reoccur in the future.