Add required permssions for terraform deployment workflow to trigger.

Author: teracross

.github/workflows/deploy.yaml

@@ -10,6 +10,7 @@ on:
         type: string
         description: Name of the file to be deployed to S3
 
+# Redundant, however leaving here for good measure as this is required
 permissions:
   id-token: write
   contents: read  

.github/workflows/download.yaml

@@ -74,5 +74,8 @@ jobs:
     needs: download
     with: 
       artifact-name: $ARTIFACT_NAME
+    permissions:
+      id-token: write
+      contents: read 
     if: ${{ needs.download.outputs.file-byte-count > 1 }}