diff --git a/.github/workflows/android-device-test.yml b/.github/workflows/android-device-test.yml
index ca8af7378..06fce2457 100644
--- a/.github/workflows/android-device-test.yml
+++ b/.github/workflows/android-device-test.yml
@@ -6,6 +6,9 @@ on:
     types:
       - completed
 
+permissions:
+  id-token: write         # needed for AWS
+
 jobs:
   android-device-test:
     strategy: