diff --git a/.github/workflows/bake.yml b/.github/workflows/bake.yml
index 2e75c1ef..a7c91ece 100644
--- a/.github/workflows/bake.yml
+++ b/.github/workflows/bake.yml
@@ -991,7 +991,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}
@@ -1243,7 +1243,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ inputs.push && inputs.output == 'image' && needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a771468d..2aab77c5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -856,7 +856,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}
@@ -1104,7 +1104,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ inputs.push && inputs.output == 'image' && needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 29d1dfe2..17e6c077 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -119,7 +119,7 @@ jobs:
       -
         name: Configure AWS credentials
         if: ${{ steps.vars.outputs.signed == 'true' && steps.vars.outputs.output-type == 'image' && needs.registry-identities.outputs.aws-ecr-enabled == 'true' }}
-        uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+        uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
         with:
           role-to-assume: ${{ needs.registry-identities.outputs.aws-ecr-role-to-assume }}
           aws-region: ${{ needs.registry-identities.outputs.aws-ecr-region }}