diff --git a/.github/workflows/cdk-diff-on-pr.yml b/.github/workflows/cdk-diff-on-pr.yml
index 21f7d4c..bc34cf7 100644
--- a/.github/workflows/cdk-diff-on-pr.yml
+++ b/.github/workflows/cdk-diff-on-pr.yml
@@ -79,7 +79,7 @@ jobs:
             scripts/cdk-diff
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
         with:
           role-to-assume: arn:aws:iam::${{ matrix.aws_account.id }}:role/${{ inputs.aws_role_name }}
           aws-region: ${{ inputs.aws_region }}
diff --git a/.github/workflows/claude-code.yml b/.github/workflows/claude-code.yml
index 8331096..17c5e28 100644
--- a/.github/workflows/claude-code.yml
+++ b/.github/workflows/claude-code.yml
@@ -42,7 +42,7 @@ jobs:
           fetch-depth: 1
 
       - name: Configure AWS Credentials (OIDC)
-        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           aws-region: ${{ inputs.region }}
diff --git a/.github/workflows/claude-pr-auto-review.yml b/.github/workflows/claude-pr-auto-review.yml
index 5eec248..2ac5958 100644
--- a/.github/workflows/claude-pr-auto-review.yml
+++ b/.github/workflows/claude-pr-auto-review.yml
@@ -48,7 +48,7 @@ jobs:
           fetch-depth: 1
 
       - name: Configure AWS Credentials (OIDC)
-        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           aws-region: ${{ inputs.region }}
diff --git a/.github/workflows/kick-codebuild.yaml b/.github/workflows/kick-codebuild.yaml
index 3cbe898..c1979d1 100644
--- a/.github/workflows/kick-codebuild.yaml
+++ b/.github/workflows/kick-codebuild.yaml
@@ -38,7 +38,7 @@ jobs:
           # pull_request_review 時は PR HEAD の SHA を明示的に指定する。
           ref: ${{ github.event_name == 'pull_request_review' && github.event.pull_request.head.sha || '' }}
       - name: configure aws credentials
-        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
         with:
           role-to-assume: arn:aws:iam::${{ inputs.aws_account_id }}:role/codebuild-github-actions-role
           aws-region: ap-northeast-1
diff --git a/.github/workflows/review-dependabot.yml b/.github/workflows/review-dependabot.yml
index 230c1db..cef3189 100644
--- a/.github/workflows/review-dependabot.yml
+++ b/.github/workflows/review-dependabot.yml
@@ -69,7 +69,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           aws-region: ${{ inputs.region }}
diff --git a/.github/workflows/vrt-ai-review.yml b/.github/workflows/vrt-ai-review.yml
index 1f87f94..176cd7b 100644
--- a/.github/workflows/vrt-ai-review.yml
+++ b/.github/workflows/vrt-ai-review.yml
@@ -265,7 +265,7 @@ jobs:
           steps.context.outputs.pr_open == 'true' &&
           steps.context.outputs.is_draft == 'false' &&
           steps.context.outputs.has_changes == 'true'
-        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0
+        uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           aws-region: ${{ env.AWS_REGION }}