https://bharathvaj.com/posts/create-iam-role-with-github-web-identity-provider/