From the course: GitHub Actions for CI/CD: Build, Test, and Deploy

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Create a service account for deployments

Create a service account for deployments - GitHub Tutorial

From the course: GitHub Actions for CI/CD: Build, Test, and Deploy

Create a service account for deployments

When we deploy to platforms outside of GitHub, our workflows need to authenticate and be granted permission to access services and resources. We can manage authentication and permissions with a service account. Service accounts aren't associated with a specific user. Instead, it's an account that a service, like GitHub Actions, will use to authenticate with the platform where an artifact is being deployed. More importantly, the permissions given to a service account are limited to the specific tasks needed to complete the deployment. This prevents service accounts from using elevated permissions or potentially accessing services that aren't required for the task at hand. To use a service account, we'll first create credentials. These credentials represent the identity the service will use and are scoped to only the permissions needed for the task. Next, we store those credentials securely as secrets or variables, so they're encrypted and never exposed in the code base. Finally…

Contents