Fix/aws secret passing to reuseable workflow

.github/workflows/nx-serverless-deployment.yml

@@ -26,6 +26,9 @@ on:
         type: boolean
         required: false
         default: false
+    secrets:
+      AWS_SECRET_ACCESS_KEY:
+        required: false
 
 jobs:
   deploy:
@@ -71,6 +74,7 @@ jobs:
 
           if [ -z "$AWS_SECRET_ACCESS_KEY" ]; then
             echo "❌ Error: AWS_SECRET_ACCESS_KEY is not defined as a secret in your $ENVIRONMENT environment"
+            echo "or passed in via an external secret from the calling workflow"
             exit 1
           fi
 

docs/nx-serverless-deployment.md

@@ -21,6 +21,9 @@ These should be configured in your GitHub Environment (or at the repository leve
 | `CFN_ROLE` | ✅ | Secret | CloudFormation role ARN to assume |
 | `AWS_REGION` | ❌ | Variable | AWS Region to deploy to (defaults to ap-southeast-2) |
 
+
+**Note:** If calling this workflow from an external GitHub organisation, you will need to pass the AWS_SECRET_ACCESS_KEY explicitly (see example below).
+
 #### Example Usage
 
 ```yaml
@@ -47,4 +50,23 @@ jobs:
     with:
       environment: ${{ github.ref_name == 'production' && 'Production' || 'Staging' }}
       package-manager: npm
+```
+
+```yaml
+name: 🚀 Deploy
+
+on:
+  push:
+    branches:
+      - staging
+      - production
+
+jobs:
+  deploy:
+    uses: aligent/workflows/.github/workflows/nx-serverless-deployment.yml@main
+    with:
+      environment: ${{ github.ref_name == 'production' && 'Production' || 'Staging' }}
+      package-manager: npm
+    secrets:
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
 ```