From 713b27e4506fe6f7c42e456c12494ece17b321ac Mon Sep 17 00:00:00 2001
From: musa-asad <musaasad@amazon.com>
Date: Thu, 9 May 2024 13:45:06 -0400
Subject: [PATCH] Moving permissions under jobs to attempt to fix credentials
 issue.

---
 ...udwatch-observability-helm-integration-test.yaml | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/amazon-cloudwatch-observability-helm-integration-test.yaml b/.github/workflows/amazon-cloudwatch-observability-helm-integration-test.yaml
index b881d5c..c41e339 100644
--- a/.github/workflows/amazon-cloudwatch-observability-helm-integration-test.yaml
+++ b/.github/workflows/amazon-cloudwatch-observability-helm-integration-test.yaml
@@ -15,10 +15,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name }}
   cancel-in-progress: true
 
-permissions:
-  id-token: write
-  contents: read
-
 env:
   TERRAFORM_AWS_ASSUME_ROLE: ${{ secrets.TERRAFORM_AWS_ASSUME_ROLE }}
   AWS_DEFAULT_REGION: us-west-2
@@ -27,6 +23,9 @@ jobs:
   HelmChartsIntegrationTest:
     name: HelmChartsIntegrationTest
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     strategy:
       fail-fast: false
     steps:
@@ -83,6 +82,9 @@ jobs:
   HelmChartsIntegrationTestWindows-2022:
     name: HelmChartsIntegrationTestWindows-2022
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     strategy:
       fail-fast: false
     steps:
@@ -139,6 +141,9 @@ jobs:
   HelmChartsIntegrationTestWindows-2019:
     name: HelmChartsIntegrationTestWindows-2019
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     strategy:
       fail-fast: false
     steps: