diff --git a/.github/workflows/create-channel.yml b/.github/workflows/create-channel.yml
index c4ade4aa6..8517ab7c8 100644
--- a/.github/workflows/create-channel.yml
+++ b/.github/workflows/create-channel.yml
@@ -19,6 +19,9 @@ env:
   CRT_CI_ROLE: ${{ secrets.CRT_CI_ROLE_ARN }}
   AWS_DEFAULT_REGION: us-east-1
 
+permissions:
+  id-token: write # This is required for requesting the JWT
+
 # nothing
 jobs:
   package: