diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index 965ac566b..b0bb3c46e 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -100,11 +100,17 @@ jobs:
           node-version: "24"
       - uses: astral-sh/setup-uv@v6
       - run: bun install --frozen-lockfile
+      - name: Fetch E2E role from Secrets Manager
+        uses: aws/agentcore-devx-devtools/.github/actions/fetch-secrets@31aa3b031a86664e29861d68956e44b07cf21a74
+        with:
+          role-arn: ${{ secrets.WORKFLOW_SECRETS_READER_ROLE_ARN }}
+          repo: E2E_AWS_ROLE_ARN
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
-          role-to-assume: ${{ vars.E2E_ROLE_ARN }}
+          role-to-assume: ${{ env.E2E_AWS_ROLE_ARN }}
           aws-region: ${{ vars.E2E_REGION || 'us-east-1' }}
+          unset-current-credentials: true
       - name: Build CLI
         run: bun run build
       - name: Run all E2E tests