I made a thing. Assume AWS IAM roles from GitHub Actions. Now I can use the best CI solution with the best cloud and not have to create IAM users. The role sessions are even tagged with repo, SHA, run numbers, etc for much saner CloudTrail trawling. https://t.co/p2BRDTQsX6