Tag See all →

#oidc

2 stories

DevOps & CI/CD Bug Report

CI pipeline red on "No changes to deploy": sam deploy, empty changesets and environment config

Tomás Herrera · Oct 7, 2026 · 7 min read

Our GitHub Actions pipeline for a serverless API failed every time a merge did not change the stack, such as documentation-only commits: Error: No changes to deploy. How CloudFormation empty changesets work, the flag that makes sam deploy exit cleanly, and the samconfig and OIDC setup we use per environment.

Banner: GitHub Actions OIDC role assumption denied by AWS because of a subject claim mismatch

DevOps & CI/CD Bug Report

GitHub Actions OIDC to AWS: Not authorized to perform sts:AssumeRoleWithWebIdentity

Ryan Pham · Oct 30, 2024 · 7 min read

Our deploy job worked on main and failed on the production environment with Not authorized to perform sts:AssumeRoleWithWebIdentity. Using a GitHub environment changes the OIDC subject claim. We rewrote the trust policy around exact subjects instead of wildcards.