Used the output from the deploy layer workflow to get the latest deployed layer arn

Author: sdangol

.github/scripts/update_layer_arn.sh

@@ -8,10 +8,13 @@
 # see .github/workflows/publish_layer.yml
 
 
-# Get the current layer version from SSM Parameter
-current_layer_arn=$(aws ssm get-parameter --name /aws/service/powertools/typescript/generic/all/latest --query Parameter.Value --output text --region us-east-1)
-current_layer_version=$(echo $current_layer_arn | sed 's/.*://')
-new_version=$((current_layer_version + 1))
+# Get the new layer arn from the first command-line argument
+new_layer_arn=$1
+if [ -z "$new_layer_arn" ]; then
+    echo "Usage: $0 <new_layer_arn>"
+    exit 1
+fi
+new_version=$(echo $new_layer_arn | sed 's/.*://')
 
 # Find all files with specified extensions in ./docs and ./examples directories
 # -type f: only find files (not directories)

.github/workflows/publish_layer.yml

@@ -96,15 +96,9 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
         with:
           ref: ${{ github.sha }}
-      - id: creds
-        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a
-        with:
-          aws-region: us-east-1
-          role-to-assume: ${{ secrets.US_EAST_1 }}
-          mask-aws-account-id: true
       - name: Replace layer versions in documentation
         run: |
-          ./.github/scripts/update_layer_arn.sh
+          ./.github/scripts/update_layer_arn.sh ${{ needs.deploy-prod.outputs.layer-arn }}
       - name: Stage changes
         run: git add .
       - name: Create PR

.github/workflows/reusable_deploy_layer_stack.yml

@@ -15,6 +15,10 @@ on:
         description: "Latest version that is published"
         required: true
         type: string
+    outputs:
+      layer-arn:
+        description: "The latest deployed Layer ARN"
+        value: ${{ jobs.deploy-cdk-stack.outputs.layer-arn }}
     secrets:
       target-account-role:
         required: true
@@ -65,6 +69,8 @@ jobs:
             "il-central-1",
             "mx-central-1"
           ]
+    outputs:
+      layer-arn: ${{ steps.store-latest-layer-arn.outputs.layer-arn }}
     steps:
       - name: checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
@@ -89,11 +95,12 @@ jobs:
       - name: Deploy Layer
         run: npm run cdk -w layers -- deploy --app cdk.out --context region=${{ matrix.region }} 'LayerPublisherStack' --require-approval never --verbose --outputs-file cdk-outputs.json
       - name: Store latest Layer ARN
+        id: store-latest-layer-arn
         if: ${{ inputs.stage == 'PROD' }}
         run: |
           mkdir cdk-layer-stack
           jq -r -c '.LayerPublisherStack.LatestLayerArn' layers/cdk-outputs.json > cdk-layer-stack/${{ matrix.region }}-layer-version.txt
-          cat cdk-layer-stack/${{ matrix.region }}-layer-version.txt
+          echo "layer-arn=$(cat cdk-layer-stack/${{ matrix.region }}-layer-version.txt)" | tee -a "$GITHUB_OUTPUT"
       - name: Save Layer ARN artifact
         if: ${{ inputs.stage == 'PROD' }}
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2