diff --git a/.github/workflows/ios-device-test.yml b/.github/workflows/ios-device-test.yml
index 5cd00ab61..a8236ff73 100644
--- a/.github/workflows/ios-device-test.yml
+++ b/.github/workflows/ios-device-test.yml
@@ -6,6 +6,9 @@ on:
     types:
       - completed
 
+permissions:
+  id-token: write         # needed for AWS
+
 jobs:
   ios-device-test:
     strategy: