permissions

awslabs · Nov 22, 2024 · 90dbaac · 90dbaac
1 parent e0fba4e
commit 90dbaac
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/.github/actions/assume-aws-role/action.yml b/.github/actions/assume-aws-role/action.yml
@@ -8,8 +8,6 @@ name: 'Assume Role'
 description: 'Assume AWS Role to be used during workflows'
 runs:
   using: "composite"
-  permissions:
-    id-token: write # This is required for requesting the JWT
   steps:
     - name: configure AWS credentials (containers)
       uses: aws-actions/configure-aws-credentials@v4

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -15,6 +15,9 @@ env:
   CRT_CI_ROLE: ${{ secrets.CRT_CI_ROLE_ARN }}
   AWS_DEFAULT_REGION: us-east-1
 
+permissions:
+  id-token: write # This is required for requesting the JWT
+
 jobs:
   linux-compat:
     runs-on: ubuntu-22.04 # latest