diff --git a/config/infra-ampad/workflows-kms-key.yaml b/config/infra-ampad/workflows-kms-key.yaml
index a71e769d..f764d211 100644
--- a/config/infra-ampad/workflows-kms-key.yaml
+++ b/config/infra-ampad/workflows-kms-key.yaml
@@ -7,7 +7,7 @@ parameters:
   AccountAdminArns:
     - {{stack_group_config.sso_admin_role.arn}}
     - !stack_output_external workflows-nextflow-ci-service-account::ServiceRoleArn
-    - !stack_output_external workflows-infra-kms-key::KeyArn
+    - !stack_output_external github-oidc-nextflow-infra::ProviderRoleArn
 
 stack_tags:
   {{stack_group_config.default_stack_tags}}
diff --git a/config/infra-dev/workflows-kms-key.yaml b/config/infra-dev/workflows-kms-key.yaml
index a71e769d..3b73c5c5 100644
--- a/config/infra-dev/workflows-kms-key.yaml
+++ b/config/infra-dev/workflows-kms-key.yaml
@@ -7,7 +7,7 @@ parameters:
   AccountAdminArns:
     - {{stack_group_config.sso_admin_role.arn}}
     - !stack_output_external workflows-nextflow-ci-service-account::ServiceRoleArn
-    - !stack_output_external workflows-infra-kms-key::KeyArn
+    - !stack_output_external sagebase-github-oidc-workflows-dev-nextflow-infra::ProviderRoleArn
 
 stack_tags:
   {{stack_group_config.default_stack_tags}}
diff --git a/config/infra-prod/workflows-kms-key.yaml b/config/infra-prod/workflows-kms-key.yaml
index a71e769d..1c853d97 100644
--- a/config/infra-prod/workflows-kms-key.yaml
+++ b/config/infra-prod/workflows-kms-key.yaml
@@ -7,7 +7,7 @@ parameters:
   AccountAdminArns:
     - {{stack_group_config.sso_admin_role.arn}}
     - !stack_output_external workflows-nextflow-ci-service-account::ServiceRoleArn
-    - !stack_output_external workflows-infra-kms-key::KeyArn
+    - !stack_output_external sagebase-github-oidc-workflows-prod-nextflow-infra::ProviderRoleArn
 
 stack_tags:
   {{stack_group_config.default_stack_tags}}