Update permissions for build job in workflow

Author: anevis

.github/workflows/build-ami.yml

@@ -10,9 +10,6 @@ on:
 jobs:
   validate:
     runs-on: ubuntu-latest
-    permissions:
-      id-token: write   # Required for OIDC authentication
-      contents: read    # Required to check out the repository
 
     steps:
     - name: Checkout code
@@ -31,6 +28,10 @@ jobs:
 
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write   # Required for OIDC authentication
+      contents: read    # Required to check out the repository
+
     needs: validate
     if: github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && github.ref == 'refs/heads/main')
     steps: