github_oidc_provider.yaml

AWSTemplateFormatVersion: 2010-09-09
# This can only be deployed once per account.

Resources:

  GitHubOIDC:
    Type: AWS::IAM::OIDCProvider
    Properties:
      Url: https://token.actions.githubusercontent.com
      ClientIdList:
        - sts.amazonaws.com
      ThumbprintList:
        - 6938fd4d98bab03faadb97b34396831e3780aea1

Outputs:

  GitHubOIDCArn:
    Value: !Ref GitHubOIDC