静的サイトジェネレータ「Hugo」でブログサイトを S3 + CloudFrontでホストするまで [第4回〜HugoをGithub Action でS3にプッシュする〜]

# This is a basic workflow to help you get started with Actions

name: Deploy into technowanko.com

# Controls when the workflow will run
on:
  push:
    branches:
      - main

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  # This workflow contains a single job called "build"
  build:
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    # These permissions are needed to interact with GitHub's OIDC Token endpoint.
    permissions:
      id-token: write
      contents: read

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v3
        with:
          submodules: true

      # Runs a single command using the runners shell
      - name: Setup Hugo
        uses: peaceiris/actions-hugo@v2
        with:
          hugo-version: "0.100.2"
          extended: true
      
      - name: Build Hugo
        run: |
          cd www
          hugo          
      
      - name: upload artifact
        uses: actions/upload-artifact@v3
        with:
          name: my-artifact
          path: www/public
  
  deploy:
    needs: build
    runs-on: ubuntu-latest

    # These permissions are needed to interact with GitHub's OIDC Token endpoint.
    permissions:
      id-token: write
      contents: read

    steps:
      - uses: actions/checkout@v3

      - name: Download artifacts for build
        uses: actions/download-artifact@v3
        with:
          name: my-artifact
          path: www/public # 展開先

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@master
        with:
          aws-region: ap-northeast-1
          role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
          role-session-name: GitHubActions-${{ github.run_id }}
          role-duration-seconds: 900 # minimum: 900sec, maximum: iam role session duration

      - name: Upload files to the production website with the AWS CLI
        run: |
          echo "uploding to s3 ..."
          aws s3 sync www/public s3://${{ secrets.S3_BUCKET }}/ --size-only --delete
          aws cloudfront create-invalidation --region ap-northeast-1 --distribution-id E3I59QUS6FUN5Y --paths "/*"
                    

user@host:~/work/Blog/blog_hosted_on_s3$ pwd
/Users/hogehoge/work/Blog/blog_hosted_on_s3
user@host:~/work/Blog/blog_hosted_on_s3$ ls -1
README.md
deploy.sh*
img_to_s3/
www/
user@host:~/work/Blog/blog_hosted_on_s3$ git add . & git commit -m 'added new post' & git push origin main

- name: Configure AWS Credentials
  uses: aws-actions/configure-aws-credentials@master
  with:
     aws-region: ap-northeast-1
     role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
     role-session-name: GitHubActions-${{ github.run_id }}
     role-duration-seconds: 900 # minimum: 900sec, maximum: iam role session duration