diff --git a/.github/workflows/apply.yml b/.github/workflows/apply.yml
index 236f9b1..48fe557 100644
--- a/.github/workflows/apply.yml
+++ b/.github/workflows/apply.yml
@@ -8,11 +8,15 @@ on:
     paths:
       - 'infra/**'
 
+permissions:
+  contents: read
+  id-token: write
+
 env:
   # Setting an environment variable with the value of a configuration variable
 #   APP_NAME: ${{ vars.APP_NAME }}
 #   ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}
-#   ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
+  # ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
 #   ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET}}
 #   ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
   TF_VAR_discord_token: ${{ secrets.DISCORD_TOKEN }}
@@ -31,9 +35,12 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v2
 
-      - uses: azure/login@v1
+      - name: 'Az CLI login'
+        uses: azure/login@v1
         with:
-          creds: ${{ secrets.AZURE_CREDENTIALS }}
+          client-id: ${{ secrets.ARM_CLIENT_ID }}
+          tenant-id: ${{ secrets.ARM_TENANT_ID }}
+          subscription-id: ${{ secrets.ARM_SUBSCRIPTION_ID }}
 
       - uses: alexellis/arkade-get@master
         with: