diff --git a/.github/workflows/example-build-docker.yml b/.github/workflows/example-build-docker.yml
index cc3c882..8fe3385 100644
--- a/.github/workflows/example-build-docker.yml
+++ b/.github/workflows/example-build-docker.yml
@@ -5,6 +5,10 @@ on:
     branches:
       - example/pipeline-sam # or specify any branch you want to trigger this workflow on
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
@@ -31,8 +35,8 @@ jobs:
 
     - name: Build, tag, and push Docker image
       env:
-        ECR_URI: "778529894665.dkr.ecr.us-east-1.amazonaws.com/web-app"
-        IMAGE_TAG: latest
+        ECR_URI: "697698820969.dkr.ecr.us-east-1.amazonaws.com/web-app"
+        IMAGE_TAG: latest-sam
       run: |
         yarn --frozen-lockfile
         yarn nx build api-flowaccount-workshop