Ditch AWS Access Keys: Securely Pushing Docker Images to Amazon ECR from GitHub Actions Using OIDC

For years, one of the most common patterns in CI pipelines looked something like this: