diff --git a/.github/workflows/publish-to-odr.yml b/.github/workflows/publish-to-odr.yml
index 71fefb824f..442de88983 100644
--- a/.github/workflows/publish-to-odr.yml
+++ b/.github/workflows/publish-to-odr.yml
@@ -36,7 +36,7 @@ jobs:
           version: 'latest'
 
       - name: AWS Configure
-        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
         with:
           aws-region: ap-southeast-2
           mask-aws-account-id: true
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 827511a3b0..428c0c3e48 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -69,14 +69,14 @@ jobs:
           docker run -v "${PWD}:${PWD}" ghcr.io/linz/argo-tasks:v3 stac-validate "$PWD"/stac/**/collection.json
 
       - name: AWS Configure
-        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
         with:
           aws-region: ap-southeast-2
           mask-aws-account-id: true
           role-to-assume: ${{ secrets.AWS_ODR_CI_ROLE }}
 
       - name: AWS Configure ODR
-        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4
+        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
         with:
           aws-region: ap-southeast-2
           mask-aws-account-id: true