build_deploy_edge.yml

name: Build/Deploy Edge

on:
  push:
    branches:
      - main
    paths-ignore:
      - '**/*.md'
      - '.github/environment/**'

permissions:
  id-token: write
  contents: read

jobs:
  build_push:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup node
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'yarn'

      - name: Install yarn
        run: |
          : # set-version will always download the latest version of yarn
          yarn policies set-version 4.3.0
          yarn install --immutable

      - name: Build Website
        run: yarn edge

      - uses: actions/upload-artifact@v4
        with:
            name: build
            path: ./dist
            retention-days: 1

  edge_deploy:
    environment: edge
    runs-on: ubuntu-latest
    needs: build_push
    env:
      DIST: ./dist
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/download-artifact@v4
        with:
          name: build
          path: ./dist

      - name: Configure AWS credentials
        id: aws_auth
        uses: aws-actions/configure-aws-credentials@v4
        with:
          audience: sts.amazonaws.com
          aws-region: ${{ vars.AWS_REGION }}
          role-to-assume: ${{ vars.AWS_ROLE_ARN }}

      - name: Copy files to the production website with the AWS CLI
        run: |
          aws s3 sync --delete ${{ env.DIST }} s3://${{ vars.BUCKET }} --region ${{ vars.AWS_REGION }}

      - name: Clear cloudfront cache
        run: |
          aws cloudfront create-invalidation \
          --distribution-id ${{ vars.DISTRIBUTION_ID }} \
          --paths "/*" \
          --region ${{ vars.AWS_REGION }}