terraform-destroy.yml

---
name: Destroy CloudFront Environment

on:
  pull_request:
    types:
      - closed

jobs:
  terraform-destroy:
    name: Destroy CloudFront Environment
    runs-on: ubuntu-24.04

    permissions:
      id-token: write
      contents: read

    concurrency:
      group: terraform-apply-refs/pull/${{ github.event.number }}/merge
      cancel-in-progress: false

    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Setup Terraform
      uses: hashicorp/setup-terraform@v3
      with:
        terraform_wrapper: false

    - name: Get AWS credentials
      uses: aws-actions/configure-aws-credentials@v4
      with:
        aws-region: us-east-1
        role-to-assume: arn:aws:iam::771971951923:role/bpm-preview-provisioning
        audience: sts.amazonaws.com
        role-duration-seconds: 900

    - name: Initialize Terraform
      run: terraform init -backend-config="key=refs/pull/${{ github.event.number }}/merge.tfstate"

    - name: Terraform Destroy
      run: terraform destroy -var=ref=refs/pull/${{ github.event.number }}/merge -auto-approve