diff --git a/infrastructure/terraform/modules/aws-backup-source/kms.tf b/infrastructure/terraform/modules/aws-backup-source/kms.tf
index dd5a5bf..fbc96ea 100644
--- a/infrastructure/terraform/modules/aws-backup-source/kms.tf
+++ b/infrastructure/terraform/modules/aws-backup-source/kms.tf
@@ -26,7 +26,7 @@ data "aws_iam_policy_document" "backup_key_policy" {
     sid = "EnableIAMUserPermissions"
     principals {
       type        = "AWS"
-      identifiers = ["arn:aws:iam::${data.aws_caller_identity.current.account_id}:root", "arn:aws:sts::${data.aws_caller_identity.current.account_id}:assumed-role/GitHub_Deploy/*"]
+      identifiers = ["arn:aws:iam::${data.aws_caller_identity.current.account_id}:root", "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/service-role/GitHub_Deploy"]
     }
     actions   = ["kms:*"]
     resources = ["*"]