From 307d2c822f1e9a078c13c2e29712d9b6cf47d7f7 Mon Sep 17 00:00:00 2001
From: Leandro Damascena <lcdama@amazon.pt>
Date: Tue, 14 Jan 2025 12:19:28 +0000
Subject: [PATCH] Improving security

---
 .github/workflows/publish_v3_layer.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/publish_v3_layer.yml b/.github/workflows/publish_v3_layer.yml
index 55571500889..d27031af366 100644
--- a/.github/workflows/publish_v3_layer.yml
+++ b/.github/workflows/publish_v3_layer.yml
@@ -303,7 +303,7 @@ jobs:
     needs: [update_v3_layer_arn_docs, prepare_docs_alias]
     permissions:
       # lower privilege propagated from parent workflow (release.yml)
-      #contents: write
+      contents: read
       #pages: write
       pull-requests: none
       id-token: write