diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index db34609d0..7e9fe9c2d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -92,7 +92,7 @@ jobs:
       # Review deploys even when tests fail. The buckets, distributions and
       # roles are in microbit-foundation/microbit-org's apps/python. Only main
       # and release tags can assume the role for staging, beta and production.
-      - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
+      - uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6
         if: github.repository_owner == 'microbit-foundation' && (env.STAGE == 'REVIEW' && !cancelled() || success())
         with:
           role-to-assume: arn:aws:iam::700731169244:role/github-actions-deploy-python-content${{ env.STAGE != 'REVIEW' && '-release' || '' }}