From 163b496f8ba421cd48c1968467c1fe5f98f9c83a Mon Sep 17 00:00:00 2001
From: Tom Keller <1083460+kellertk@users.noreply.github.com>
Date: Thu, 4 Sep 2025 16:46:38 -0700
Subject: [PATCH] chore: update AWS role references to use variables (#1472)

---
 .github/workflows/automerge-approved-prs.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/automerge-approved-prs.yml b/.github/workflows/automerge-approved-prs.yml
index 969a204..37a3b07 100644
--- a/.github/workflows/automerge-approved-prs.yml
+++ b/.github/workflows/automerge-approved-prs.yml
@@ -16,7 +16,7 @@ jobs:
         uses: aws-actions/configure-aws-credentials@v4
         with:
           aws-region: us-west-2
-          role-to-assume: ${{ secrets.SECRETS_AWS_PACKAGING_ROLE_TO_ASSUME }}
+          role-to-assume: ${{ vars.AWS_PACKAGING_ROLE_TO_ASSUME }}
           role-duration-seconds: 900
           role-session-name: SecretsManagerFetch
       - name: Get bot user token
@@ -24,7 +24,7 @@ jobs:
         with:
           parse-json-secrets: true
           secret-ids: |
-            ${{ secrets.OSDS_PACKAGING_ROLE }}
+            ${{ vars.OSDS_PACKAGING_ROLE }}
       - name: Enable PR automerge
         run: gh pr merge --auto --squash "$PR_URL"
         env: