From fd1d94882edd28ca72f0c0024aa72ac43d3219bd Mon Sep 17 00:00:00 2001
From: Jose Corella <joseeduardocorella@gmail.com>
Date: Thu, 16 Jan 2025 14:45:04 -0800
Subject: [PATCH] chore: update iam permissions for static tv

---
 codebuild/nodejs20.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/codebuild/nodejs20.yml b/codebuild/nodejs20.yml
index dc597a082..76479dc0a 100644
--- a/codebuild/nodejs20.yml
+++ b/codebuild/nodejs20.yml
@@ -5,8 +5,15 @@ env:
     NODE_OPTIONS: "--max-old-space-size=4096"
 
 phases:
-  install:
+  install: 
     commands:
+      - TMP_ROLE=$(aws sts assume-role --role-arn "arn:aws:iam::370957321024:role/GitHub-CI-MPL-Dafny-Role-us-west-2" --role-session-name "CB-TestVectorResources")
+      - export TMP_ROLE
+      - export AWS_ACCESS_KEY_ID=$(echo "${TMP_ROLE}" | jq -r '.Credentials.AccessKeyId')
+      - export AWS_SECRET_ACCESS_KEY=$(echo "${TMP_ROLE}" | jq -r '.Credentials.SecretAccessKey')
+      - export AWS_SESSION_TOKEN=$(echo "${TMP_ROLE}" | jq -r '.Credentials.SessionToken')
+      - aws sts get-caller-identity
+      
       - n 20
       - node --version ; npm --version
       - npm ci --unsafe-perm