diff --git a/cloudformation.yaml b/cloudformation.yaml
index 84bfc06..a3d91bb 100644
--- a/cloudformation.yaml
+++ b/cloudformation.yaml
@@ -114,6 +114,12 @@ Resources:
                   - lambda:UpdateFunctionConfiguration
                 Effect: Allow
                 Resource: !GetAtt LandingContactFormLambda.Arn
+              - Action:
+                  - lambda:GetFunction
+                  - lambda:UpdateFunctionCode
+                  - lambda:UpdateFunctionConfiguration
+                Effect: Allow
+                Resource: !GetAtt LandingNewsletterSignUpLambda.Arn
           PolicyName: manage-static-website
 
   LambdaExecutionRole:
@@ -433,7 +439,7 @@ Resources:
       Action: lambda:InvokeFunction
       FunctionName: !Ref LandingContactFormLambda
       Principal: apigateway.amazonaws.com
-      SourceArn: !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${LandingAPIGateway}/*/*/'
+      SourceArn: !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${LandingAPIGateway}/*/*/contact'
 
   # Create permission for API Gateway to invoke Lambda
   LandingNewsletterSignUpAPIPermission:
@@ -442,7 +448,7 @@ Resources:
       Action: lambda:InvokeFunction
       FunctionName: !Ref LandingNewsletterSignUpLambda
       Principal: apigateway.amazonaws.com
-      SourceArn: !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${LandingAPIGateway}/*/*/'
+      SourceArn: !Sub 'arn:aws:execute-api:${AWS::Region}:${AWS::AccountId}:${LandingAPIGateway}/*/*/newsletter'
 
 Outputs:
   LandingContactFormInvokeURL:
diff --git a/deploy/settings.py b/deploy/settings.py
index 94a01d0..47a66c9 100644
--- a/deploy/settings.py
+++ b/deploy/settings.py
@@ -12,5 +12,5 @@
 #
 # Development Token is limited to 500/requests day.
 # If needed you can reset the limit here (see login credentials in Notion):
-# https://marketplace.crisp.chat/plugins/plugin/421c7588-7ed5-464a-a1f7-8917ae9bafe7/tokens/
-CRISP_WEBSITE_ID = '6de2ec98-888b-4ff4-b9be-dab91a460ee6'
+# https://marketplace.crisp.chat/plugins/plugin/279fff4f-f709-41d0-80ff-33c01843b905/tokens/
+CRISP_WEBSITE_ID = '2aa7bcb2-8094-4624-b64e-112c2ca3a174'