Skip to content

GitHub Actions / Terraform / CI/CD

GitHub Actions release path for infrastructure and site delivery

A CI/CD workflow that separates Terraform planning, approved apply, static build, S3 sync, and CloudFront invalidation.

Outcome: Clearer change review, safer production applies, and a repeatable delivery model without long-lived AWS credentials.

Situation

Manual deployment steps made releases harder to audit and easier to break.

Approach

The delivery path was split into reviewable Terraform plans, manually approved applies, and a separate static site deploy workflow. AWS access used GitHub OIDC instead of long-lived credentials.

Outcome

The team gained clearer change review, safer production applies, and a repeatable deployment model.