diff --git a/.github/workflows/prod.yaml b/.github/workflows/prod.yaml
index 75fc61a..04765cb 100644
--- a/.github/workflows/prod.yaml
+++ b/.github/workflows/prod.yaml
@@ -65,6 +65,9 @@ jobs:
     needs: [ call-build-workflow ]
     name: AWS ECS 배포
     uses: ./.github/workflows/deploy.yaml
+    permissions:
+      id-token: write
+      contents: read
     with:
       ecs-service: ${{ needs.prepare-variables.outputs.ecs-service }}
       ecs-cluster: ${{ needs.prepare-variables.outputs.ecs-cluster }}