"topic": "troubleshooting" · 1 guide
Troubleshooting
Why a workflow is refused, read from the token and the policy.
- job/fix-not-authorized-assumerolewithwebidentity category Troubleshooting
Fixing “Not authorized to perform sts:AssumeRoleWithWebIdentity” in GitHub Actions
A checklist for the AWS OIDC error, ordered by how often each cause applies: sub format, job context, wildcards under StringEquals, audience, provider ARN and customized claims.
· 7 min
Have a policy to test? Use the OIDC trust checker.