super excited to be able to publicly share some of my work from the last few months :) Wanted to use GitHub Actions' OIDC IdP for per-repo access to AWS, but got stuck on AWS session tags not being compatible with GHA's claims? What If: You used an inline session policy https://github.com/Skyscanner/gha-aws-oidc-sample