[action] add cloudfront invalidation

Author: mr-chelyshkin

.github/actions/aws-cloudfront-invalidation/action.yml

@@ -0,0 +1,51 @@
+name: CloudFront Invalidation
+description: Creates CloudFront invalidation to clear cache for updated content
+
+inputs:
+  aws_access_key:
+    description: AWS access key ID
+    required: true
+  aws_secret_key:
+    description: AWS secret access key
+    required: true
+  aws_region:
+    description: AWS region (e.g. us-east-1)
+    required: true
+  distribution_id:
+    description: CloudFront distribution ID
+    required: true
+  paths:
+    description: Paths to invalidate (space-separated, e.g. "/* /index.html")
+    required: false
+    default: "/*"
+  caller_reference:
+    description: Unique reference for this invalidation (auto-generated if not provided)
+    required: false
+    default: ""
+
+runs:
+  using: composite
+  steps:
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v4
+      with:
+        aws-access-key-id:     ${{ inputs.aws_access_key }}
+        aws-secret-access-key: ${{ inputs.aws_secret_key }}
+        aws-region:            ${{ inputs.aws_region }}
+
+    - name: Create CloudFront invalidation
+      shell: bash
+      run: |
+        if [ -z "${{ inputs.caller_reference }}" ]; then
+          CALLER_REF="github-actions-$(date +%s)-${{ github.run_id }}"
+        else
+          CALLER_REF="${{ inputs.caller_reference }}"
+        fi
+        
+        aws cloudfront create-invalidation \
+          --distribution-id ${{ inputs.distribution_id }} \
+          --paths ${{ inputs.paths }} \
+          --caller-reference "${CALLER_REF}" \
+          --no-cli-pager
+        
+        echo "✅ CloudFront invalidation created successfully!"

examples/actions/aws-cloudfront-invalidation.md

@@ -0,0 +1,44 @@
+# 🧬 CloudFront Invalidation · GitHub Composite Action
+
+This composite GitHub Action creates CloudFront invalidations to clear cache for updated content.
+
+## ✅ Features
+- Uses AWS CLI to create CloudFront invalidations
+- Supports custom paths or wildcard invalidation
+- Auto-generates unique caller reference
+- Simple and fast cache clearing for static sites
+
+## 🔧 Usage Example
+```yaml
+name: Deploy Static Site
+
+on:
+ push:
+   branches: [main]
+
+jobs:
+ deploy:
+   runs-on: ubuntu-latest
+   steps:
+     - name: Deploy to S3
+       # ... your S3 sync step ...
+
+     - name: Invalidate CloudFront
+       uses: "Mad-Pixels/github-workflows/.github/actions/aws-cloudfront-invalidation@main"
+       with:
+         aws_access_key:     ${{ secrets.AWS_ACCESS_KEY_ID }}
+         aws_secret_key:     ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+         aws_region:         "us-east-1"
+         distribution_id:    ${{ secrets.CLOUDFRONT_DISTRIBUTION_ID }}
+         paths:              "/*"
+```
+
+## 📥 Inputs
+| **Name**                | **Required** | **Description**                                   |
+|-------------------------|--------------|---------------------------------------------------|
+| `aws_access_key_id`     | ✅ Yes       | AWS access key ID                                 |
+| `aws_secret_access_key` | ✅ Yes       | AWS secret access key                             |
+| `aws_region`            | ✅ Yes       | AWS region (e.g. us-east-1)                       |
+| `distribution_id`       | ✅ Yes       | CloudFront distribution ID                        |
+| `paths`                 | ❌ No        | Paths to invalidate (default: "/*")               |
+| `caller_reference`      | ❌ No        | Unique reference (auto-generated if not provided) |