Move diff command to script.

.github/workflows/diff.yaml

@@ -29,6 +29,6 @@ jobs:
       - 
         name: CDK Diff
         env:
-          CDK_DEPLOY_ACCOUNT: ${{ secrets.CDK_DEPLOY_ACCOUNT }}
-          CDK_DEPLOY_REGION: ${{ env.AWS_REGION }}
+          AWS_ACCOUNT: ${{ secrets.CDK_DEPLOY_ACCOUNT }}
+          AWS_REGION: ${{ env.AWS_REGION }}
         run: cd iac/ && node_modules/aws-cdk/bin/cdk diff

iac/bin/iac.ts

@@ -7,9 +7,7 @@ const app = new cdk.App();
 
 new IacStack(app, IacStack.stack_name, {
   env: {
-    // region: app.node.tryGetContext("aws_region"),
-    // account: app.node.tryGetContext("aws_account"),
-    account: process.env.CDK_DEPLOY_ACCOUNT, 
-    region: process.env.CDK_DEPLOY_REGION 
+    region: app.node.tryGetContext("aws_region"),
+    account: app.node.tryGetContext("aws_account"),
   }
 });

scripts/diff.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+set -e
+
+pushd $(dirname $0)/../iac
+
+if [ -z "$AWS_REGION" ]; then
+    echo "AWS_REGION env var is required for deployment"
+    exit 1
+fi
+if [ -z "$AWS_ACCOUNT" ]; then
+    echo "AWS_ACCOUNT env var is required for deployment"
+    exit 1
+fi
+
+cdk diff \
+    -c aws_region=$AWS_REGION \
+    -c aws_account=$AWS_ACCOUNT \
+    --require-approval never