Move task tests to AWS sandbox (OIDC) (#406)

Author: 0x2b3bfa0

.github/workflows/smoke.yml

@@ -1,4 +1,6 @@
 name: Smoke Test
+permissions:
+  id-token: write
 on:
   pull_request_target:
     paths: 'task/**'
@@ -19,9 +21,6 @@ jobs:
       matrix:
         provider: [AWS, AZ, GCP]
     env:
-      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-      AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }}
       AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
       AZURE_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET }}
       AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
@@ -35,6 +34,11 @@ jobs:
     - uses: actions/setup-go@v2
       with:
         go-version: ^1.17
+    - if: matrix.provider == 'AWS'
+      uses: aws-actions/configure-aws-credentials@v1
+      with:
+        aws-region: us-west-1
+        role-to-assume: arn:aws:iam::342840881361:role/SandboxUser
     - run: go test ./task -v -timeout=30m -count=1
     - if: always()
       uses: actions/checkout@v2