Richard H Boyd

I don't have gov-cloud access right away, could you try it with two regions in the same partition? if that fails too I can get some kind of patch out...

this bug is very dumb and is probably going to cause a lot of customer pain. I'll get it fixed.

Thank you for letting us know

I'm looking into this now. GH is still actively developing this feature so there are breaking changes that are happening until they officially GA the capability.

@Nirrleybo I think the audience is `sigstore` for now. GH released teh ability to set an arbitrary audience yesterday and I am working on adding that to the action now....

I have a PR submitted to update the default audience to sts.amazonaws.com. Once that's landed we can rebase this PR for allowing customers to modify the audience.

We don't want the default to be sigstore because it poses a risk of causing a confused deputy problem. This change hasn't been officially released yet (in the v1 tag)...

This fees like one of those times where, in the attempt to give developers the most flexibility, we have made it more confusing. By accepting many different types of values,...

If you were reading the docs for CodeArtifact and saw [this](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html#cfn-apigateway-restapi-policy), would you know what that json was supposed to look like?

This is good feedback, I need to clean this example up to (1) provide more checkpoints what the folder structure looks like at various points and (2) make the desired...