[posquit0]

👋 Background

The AWS credentials action currently does not expose session duration, so callers cannot customize the duration of OIDC or target-role sessions.

⚙️ Description

• Add optional aws_github_oidc_role_duration and aws_chained_role_duration inputs, both measured in seconds and defaulting to 3600 to preserve existing behavior.
• Pass each input to the corresponding upstream role-duration-seconds option. The chained input also applies when assuming the target role with IAM user access keys.
• Document role session limits: OIDC role chaining is capped at one hour; direct OIDC and IAM user access-key role assumption can use the role's configured maximum, up to 12 hours.

---

🚨 To Reviewers

Validation passed:

• yamllint .github/actions/aws.configure-credentials/action.yaml
• uvx check-jsonschema --builtin-schema vendor.github-actions .github/actions/aws.configure-credentials/action.yaml
• git diff --check

Live AWS authentication was not exercised. Duration values are forwarded without clamping; AWS enforces the session limits.

[github-actions]

GitHub Actions Integration

Repository	jactionlint	check-jsonschema (workflows)	check-jsonschema (actions)
tedilabs/github-actions	✅	✅	✅

✅ All 1 passed.