diff --git a/.github/workflows/publish_layer.yml b/.github/workflows/publish_layer.yml
index 1f0934809e..bd6aa14079 100644
--- a/.github/workflows/publish_layer.yml
+++ b/.github/workflows/publish_layer.yml
@@ -91,7 +91,8 @@ jobs:
     needs: [deploy-prod]
     uses: ./.github/workflows/update_ssm.yml
     permissions:
-      contents: read
+      contents: write
+      id-token: write
     with:
       environment: prod
       package_version: ${{ inputs.latest_published_version }}