Deploy to Cloudfront from GitHub using OpenID Connect
A common usage of CI/CD tools today is to build and deploy a static website to a CDN.
This has many advantages over the old way (like running Wordpress), such as security, cost, and flexibility. Developers love the ability to use any crazy JavaScript library they want on the client side, Sysadmins love not having another PHP server to feed and water, and accountants love the bill!
However, one common issue has been the common practice of hard-coding AWS API keys into CI servers, or worse, committing them into a repository.