Common mistake is trusting the repo instead of the workflow. Then any workflow inherits the same cloud access.