The correct option is on: release: types: [published].

In GitHub Actions the release event supports activity types that let you filter on specific release actions. The published type fires only when a full release is published. Draft creation and editing are different actions and prerelease publication uses the prereleased action, so they do not match this trigger.

on: release: types: [created] triggers when a release is created which often corresponds to opening a draft. This would run for drafts and does not satisfy the requirement to avoid drafts and initial creation.

on: push: tags: [v*] listens to tag pushes rather than the release event. It can run for any matching tag and cannot distinguish between drafts, edits, or prereleases, so it is too broad for the scenario.

on: published is not a valid event key in GitHub Actions. The published activity must be specified under the release event to work.

Full AWS Practitioner Certification Question