fix: update publish stable AWS pipeline (#1218)

* fix: update publish stable AWS pipeline

* Update CHANGELOG.md

.github/workflows/publish-stable-aws.yml

@@ -7,6 +7,9 @@ on:
 jobs:
   aws-publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v1
@@ -15,15 +18,19 @@ jobs:
           registry-url: https://registry.npmjs.org/
       - name: 'Install makensis (apt)'
         run: sudo apt update && sudo apt install -y nsis nsis-pluginapi
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: ${{secrets.AWS_ROLE_NAME }}
+          role-session-name: github-actions-from-toolbelt
+          aws-region: us-east-1
       - name: Deploy on AWS
         run: |
           yarn install --ignore-scripts
           yarn release
           yarn release:win
         env:
             IS_CI: "true"
-            AWS_ACCESS_KEY_ID: ${{secrets.AWS_ACCESS_KEY_ID}}
-            AWS_SECRET_ACCESS_KEY: ${{secrets.AWS_SECRET_ACCESS_KEY}}
   publish-success:
     runs-on: ubuntu-latest
     needs: [aws-publish]

CHANGELOG.md

@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - handle OPTIONS request for CORS
+- update `publish-stable-aws` pipeline
 
 ## [4.0.4] - 2023-11-03