Loading...
Loading...
Error: OIDC Token Exchange failed. Could not verify identity with AWS/Azure/GCP.OIDC (OpenID Connect) is the modern way to authenticate GitHub Actions with cloud providers without using long-lived secrets. A failure usually means the 'permissions' block in your YAML is missing or the Identity Provider (IdP) trust relationship is misconfigured.
Ensure your workflow file explicitly requests the id-token permission.
permissions:
id-token: write
contents: readIn 2026, long-lived AWS keys are considered a security liability. OIDC allows GitHub to issue a short-lived JWT that cloud providers can verify natively. When this fails, it's almost always a 'silent' error in the IAM trust relationship. Check your Subject (sub) claim—it must exactly match the GitHub repository and branch/environment pattern.