diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index d5a3503fc..6f7656ebe 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -71,9 +71,9 @@ jobs:
         uses: aws-actions/configure-aws-credentials@v1
         with: 
           # these variable names differ from the second with block - sure hope you can have two of those
-          aws-access-key-id: ${{ env.AWS_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ env.AWS_SECRET_ACCESS_KEY }}
-          aws-region: ${{ env.AWS_REGION }}
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_REGION }}
       
       - name: whitelist runner ip address
         run: |