From dda950e0a9f573555fb963e5d8ab6ded4ae175ef Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 25 Aug 2026 16:12:57 +0000
Subject: [PATCH 1/2] Initial plan


From 5ab80aa3ab9cd589a14083038c04001daa20ea55 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 25 Aug 2026 16:14:10 +0000
Subject: [PATCH 2/2] fix: allow deploy workflow to read AWS region and SG from
 vars

Co-authored-by: sanket-rajput <100849898+sanket-rajput@users.noreply.github.com>
---
 .github/workflows/deploy.yml | 4 ++--
 deploy/README.md             | 2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 03ffdb7..ff0be2d 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -9,8 +9,8 @@ jobs:
     name: Deploy to Production EC2
     runs-on: ubuntu-latest
     env:
-      AWS_REGION: ${{ secrets.AWS_REGION }}
-      EC2_SECURITY_GROUP_ID: ${{ secrets.EC2_SECURITY_GROUP_ID }}
+      AWS_REGION: ${{ vars.AWS_REGION || secrets.AWS_REGION }}
+      EC2_SECURITY_GROUP_ID: ${{ vars.EC2_SECURITY_GROUP_ID || secrets.EC2_SECURITY_GROUP_ID }}
 
     steps:
       - name: Configure AWS credentials
diff --git a/deploy/README.md b/deploy/README.md
index 60aba77..991ac1d 100644
--- a/deploy/README.md
+++ b/deploy/README.md
@@ -48,6 +48,8 @@ The deployment workflow (`.github/workflows/deploy.yml`) temporarily whitelists
 Required repository secrets for this automation:
 - `AWS_ACCESS_KEY_ID`
 - `AWS_SECRET_ACCESS_KEY`
+
+Required repository variables (or secrets) for this automation:
 - `AWS_REGION`
 - `EC2_SECURITY_GROUP_ID`