add permission to configure AWS credentials

Author: ezhang6811

.github/workflows/main-build.yml

@@ -122,7 +122,7 @@ jobs:
     name: "Publish Main Build Status"
     needs: [ build, application-signals-e2e-test ]
     runs-on: ubuntu-latest
-    if: always()
+    if: always() && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release/'))
     steps:
       - name: Configure AWS Credentials for emitting metrics
         uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 #5.0.0

.github/workflows/nightly-build.yml

@@ -12,6 +12,9 @@ env:
   AWS_DEFAULT_REGION: us-east-1
   BRANCH_NAME: nightly-dependency-updates
 
+permissions:
+  id-token: write
+
 jobs:
   update-and-create-pr:
     runs-on: ubuntu-latest