From c7dd68435870f7c18a4e4789e222096ff2209433 Mon Sep 17 00:00:00 2001
From: "Evan L. Ray" <elray@umass.edu>
Date: Tue, 10 Dec 2024 17:11:32 -0500
Subject: [PATCH] id-token write required for AWS auth

---
 .github/workflows/snapshot-nhsn-data.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/snapshot-nhsn-data.yml b/.github/workflows/snapshot-nhsn-data.yml
index 2585e8e..10013fb 100644
--- a/.github/workflows/snapshot-nhsn-data.yml
+++ b/.github/workflows/snapshot-nhsn-data.yml
@@ -9,6 +9,11 @@ env:
   # Reich lab AWS account number
   AWS_ACCOUNT: 312560106906
 
+permissions:
+  contents: read
+  # id-token write required for AWS auth
+  id-token: write
+
 jobs:
   snapshot-nhsn-data:
     runs-on: ubuntu-latest