How to allow GitHub Enterprise OIDC endpoints to AWS STS

[chandapukiran]

Select Topic Area

Question

Body

Hi,
I am trying to setup OIDC in GHE for GitHub Actions in AWS. I am following this document: https://docs.github.com/en/[email protected]/actions/how-tos/secure-your-work/security-harden-deployments/oidc-in-aws#prerequisites

As per the prereqs i need to allow OIDC endpoints to the public, but IP range is huge; https://docs.aws.amazon.com/vpc/latest/userguide/aws-ip-ranges.html

How can i pick the IP range or is there any other alternate.