diff --git a/.github/workflows/ci_container.yml b/.github/workflows/ci_container.yml
index 1139fea2..4cc5ad5c 100644
--- a/.github/workflows/ci_container.yml
+++ b/.github/workflows/ci_container.yml
@@ -29,7 +29,7 @@ jobs:
       - name: Configure aws credentials using OIDC
         uses: aws-actions/configure-aws-credentials@master
         with:
-          role-to-assume: arn:aws:iam::283582579564:role/sre-bot-apply
+          role-to-assume: arn:aws:iam::283582579564:role/sre-bot-plan
           role-session-name: SREBotGitHubActions
           aws-region: "ca-central-1"