Go to IAM -> Users -> Create user:
User name: github-actions.
Attach policies directly, attach two policies:
| Policy | Purpose |
|---|---|
AmazonEC2ContainerRegistryFullAccess | Push/pull images to ECR |
AmazonEKSClusterPolicy | EKS access to the registry |
Create user -> Security credentials -> Create access key -> CLI -> Download .csv.
Never commit the access key to Git. Store it only in GitHub Secrets. Deactivate/delete this key when the workshop is over.