Update nginx.org-make-aws.yml

Author: eepifanova

.github/workflows/nginx.org-make-aws.yml

@@ -52,13 +52,24 @@ jobs:
       - name: Check prod access
         if: ${{ inputs.deployment_env == 'prod' }}
         run: |
+          if [ "$GITHUB_REF" != "refs/heads/main" ]; then
+            echo "Error: Production deployments are only allowed from the main branch."
+            exit 1
+          fi
+
+          if [ "$GITHUB_REPOSITORY_OWNER" != "nginx" ] && [ "$GITHUB_REPOSITORY_OWNER" != "nginxinc" ]; then
+            echo "Error: This workflow is only allowed in repositories owned by 'nginx' or 'nginxinc'."
+            exit 1
+          fi
+
           ALLOWED="${{ secrets.ALLOWED_USERS }}"
           for user in $ALLOWED; do
             if [ "$GITHUB_ACTOR" == "$user" ]; then
               echo "User $GITHUB_ACTOR is allowed to deploy to prod"
               exit 0
             fi
           done
+
           echo "User $GITHUB_ACTOR is NOT allowed to deploy to prod"
           exit 1