diff --git a/.github/workflows/automerge-approved-prs.yml b/.github/workflows/automerge-approved-prs.yml
index b16bcba40..3cc02fd36 100644
--- a/.github/workflows/automerge-approved-prs.yml
+++ b/.github/workflows/automerge-approved-prs.yml
@@ -8,6 +8,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      id-token: write
     if: >-
       github.event.review.state == 'approved' &&
       github.event.repository == 'aws/configure-aws-credentials' &&