How to deploy React app to AWS S3 using GitHub Actions ?

Set OIDC IAM provider, create role with S3/CloudFront perms, paste the YAML workflow. Triggers on push, builds, syncs, invalidates.

What is OIDC for AWS GitHub Actions?

OpenID Connect lets GitHub's JWT assume IAM roles without static access keys. Secure, short-lived creds.

Why use --delete in aws s3 sync?

Removes outdated build artifacts, keeps bucket lean, stops storage bloat from JS chunks.

⚙️ DevOps & Platform Eng

Day 53: Zero-Cred CI/CD Pipeline Deploys React to AWS S3 and CloudFront in 45 Seconds

Dragging React builds into AWS S3? Stop. A slick GitHub Actions workflow with OIDC skips access keys entirely, syncing to S3 and busting CloudFront cache automatically.

theAIcatchup Apr 10, 2026 4 min read

GitHub Actions workflow diagram deploying React app to AWS S3 and invalidating CloudFront cache without access keys

⚡ Key Takeaways

Zero AWS access keys via OIDC — secure, automated deploys in 45 seconds. 𝕏
--delete flag prevents S3 bloat from old JS chunks. 𝕏
Scales to multi-env; predicts keyless pipelines as DevOps standard by 2025. 𝕏

Published by

theAIcatchup

Ship faster. Build smarter.

#AWS S3 #CloudFront #GitHub Actions #OIDC IAM #OIDC deploy #OIDC deployment #React CI/CD

Worth sharing?

Get the best Developer Tools stories of the week in your inbox — no noise, no spam.

Originally reported by dev.to

⚡ Key Takeaways

The 60-Second TL;DR

theAIcatchup

Share this article

Worth sharing?

Related Stories

March Pipeline Hacks: Your Secrets Are Draining Away

GitHub's Got Your Azure Keys—Time to Lock Them Out with Workload Identity Federation

The Stealth GitHub Actions Attack Infiltrating 250+ AI Agent Repos

SonarQube GitHub Actions: The Bulletproof Shield Every Repo Needs

Stay in the loop