ci: Add AWS CI workflow for running unit and integ tests

Author: philasmar

.github/workflows/aws-ci.yml

@@ -0,0 +1,46 @@
+name: AWS CI
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - main
+      - dev
+      - 'feature/**'
+
+permissions:
+  id-token: write
+
+jobs:
+  run-ci:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 #v4
+        with:
+          role-to-assume: ${{ secrets.CI_MAIN_TESTING_ACCOUNT_ROLE_ARN }}
+          role-duration-seconds: 7200
+          aws-region: us-west-2
+      - name: Invoke Load Balancer Lambda
+        id: lambda
+        shell: pwsh
+        run: |
+          aws lambda invoke response.json --function-name "${{ secrets.CI_TESTING_LOAD_BALANCER_LAMBDA_NAME }}" --cli-binary-format raw-in-base64-out --payload '{"Roles": "${{ secrets.CI_TEST_RUNNER_ACCOUNT_ROLES }}", "ProjectName": "${{ secrets.CI_TESTING_CODE_BUILD_PROJECT_NAME }}", "Branch": "${{ github.sha }}"}'
+          $roleArn=$(cat ./response.json)
+          "roleArn=$($roleArn -replace '"', '')" >> $env:GITHUB_OUTPUT
+      - name: Configure Test Runner Credentials
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 #v4
+        with:
+          role-to-assume: ${{ steps.lambda.outputs.roleArn }}
+          role-duration-seconds: 7200
+          aws-region: us-west-2
+      - name: Run Tests on AWS
+        id: codebuild
+        uses: aws-actions/aws-codebuild-run-build@v1
+        with:
+          project-name: ${{ secrets.CI_TESTING_CODE_BUILD_PROJECT_NAME }}
+      - name: CodeBuild Link
+        shell: pwsh
+        run: |
+          $buildId = "${{ steps.codebuild.outputs.aws-build-id }}"
+          echo $buildId

.github/workflows/codebuild-ci.yml

@@ -2,33 +2,14 @@ version: 0.2
 
 phases:
   install:
-    commands:
-      # install .NET SDK
-      - curl -sSL https://dot.net/v1/dotnet-install.sh | bash /dev/stdin --channel 6.0
-      - export PATH="$PATH:$HOME/.dotnet"
-  pre_build:
-    commands:
-      - export ORIGINAL_AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
-      - export ORIGINAL_AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
-      - export ORIGINAL_AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN
-      - export DOTNET_CLI_TELEMETRY_OPTOUT=1
-      - eval $(aws sts assume-role --role-arn arn:aws:iam::610240510716:role/aws-dotnet-distributed-cache-provider-ci-test-runner --role-session-name test | jq -r '.Credentials | "export AWS_ACCESS_KEY_ID=\(.AccessKeyId)\nexport AWS_SECRET_ACCESS_KEY=\(.SecretAccessKey)\nexport AWS_SESSION_TOKEN=\(.SessionToken)\n"')
-
+    runtime-versions:
+      dotnet: 6.x
   build:
     commands:
-      - dotnet build AWS.DistributedCacheProvider.sln -c Release
-      - dotnet test AWS.DistributedCacheProvider.sln -c Release --no-build --logger trx --results-directory ./testresults
-  post_build:
-    commands:
-      - export AWS_ACCESS_KEY_ID=${ORIGINAL_AWS_ACCESS_KEY_ID}
-      - export AWS_SECRET_ACCESS_KEY=${ORIGINAL_AWS_SECRET_ACCESS_KEY}
-      - export AWS_SESSION_TOKEN=${ORIGINAL_AWS_SESSION_TOKEN}
-      - unset ORIGINAL_AWS_ACCESS_KEY_ID
-      - unset ORIGINAL_AWS_SECRET_ACCESS_KEY
-      - unset ORIGINAL_AWS_SESSION_TOKEN
+      - dotnet test --verbosity normal AWS.DistributedCacheProvider.sln --configuration Release --logger trx --results-directory ./testresults
 reports:
-    aws-dotnet-deploy-tests:
-        file-format: VisualStudioTrx
-        files:
-            - '**/*'
-        base-directory: './testresults'
+  aws-dotnet-distributed-cache-provider-tests:
+    file-format: VisualStudioTrx
+    files:
+      - '**/*'
+    base-directory: './testresults'