fix(pipeline): FTRS-1056 Add id-token write permission to job requiring AWS creds (#715)

lukeb-nhs · web-flow · commit 4b2a024f9cfe · 2026-01-20T16:21:56.000Z
diff --git a/.github/workflows/pipeline-deploy-sandbox.yaml b/.github/workflows/pipeline-deploy-sandbox.yaml
@@ -46,6 +46,8 @@ jobs:
         needs.validate-sandbox-tag.outputs.sandbox_service || 'sandbox',
         needs.validate-sandbox-tag.outputs.sandbox_environment || 'API'
       ) }}
+    permissions:
+      id-token: write
     needs:
       - metadata
       - validate-sandbox-tag
