From d94b9993fe3a2411a98f320c36c5641acc0463e1 Mon Sep 17 00:00:00 2001
From: moeboua-cloud <moe.boua@gmail.com>
Date: Tue, 5 May 2026 13:12:17 -0400
Subject: [PATCH] Skip AWS preview deploys for forked pull requests

---
 .github/workflows/infra-deploy.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/infra-deploy.yml b/.github/workflows/infra-deploy.yml
index 3045801b614de..616fc99748610 100644
--- a/.github/workflows/infra-deploy.yml
+++ b/.github/workflows/infra-deploy.yml
@@ -30,6 +30,8 @@ permissions:
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   publish:
+    # Forked pull requests do not have the AWS access needed for preview deployments.
+    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
     runs-on: developer_site_runner
     steps:
       - name: Configure AWS credentials from Test account