diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
index 6bc8d971d..3d292b72e 100644
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@@ -9,6 +9,9 @@ jobs:
     if: ${{ github.repository == 'noqdev/iambic' && github.event.commits[0].author.name != 'Version Auto Bump' }}
     runs-on: ubuntu-latest
     name: docs publishing
+    permissions:
+      id-token: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - name: Configure AWS Credentials
@@ -21,4 +24,4 @@ jobs:
         run: |
           cd docs/web
           yarn
-          make build_and_upload
\ No newline at end of file
+          make build_and_upload