diff --git a/.github/workflows/update-queue-times.yml b/.github/workflows/update-queue-times.yml
index 5526592f05..0c8249fe2b 100644
--- a/.github/workflows/update-queue-times.yml
+++ b/.github/workflows/update-queue-times.yml
@@ -11,9 +11,17 @@ defaults:
 jobs:
   update-queue-rockset:
     runs-on: ubuntu-20.04
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v3
       - run: yarn install --frozen-lockfile
+      - name: configure aws credentials
+        id: aws_creds
+        uses: aws-actions/configure-aws-credentials@v1.7.0
+        with:
+          role-to-assume: arn:aws:iam::308535385114:role/gha_workflow_update_queue_times
+          aws-region: us-east-1
       - run: yarn node scripts/updateQueueTimes.mjs
         env:
           ROCKSET_API_KEY: ${{ secrets.ROCKSET_API_KEY }}