POLISH

.github/workflows/post_release_version_bump.yml

@@ -58,7 +58,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: check-version
     steps:
-      - name: Configure AWS credentials for PyPI secrets
+      - name: Configure AWS credentials for BOT secrets
         uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN_PYPI_RELEASE }}

.github/workflows/pre_release_prepare.yml

@@ -11,19 +11,38 @@ on:
         required: true
         default: 'false'
 
+env:
+  AWS_DEFAULT_REGION: us-east-1
+
 permissions:
   contents: write
   pull-requests: write
+  id-token: write
 
 
 jobs:
   update-version-and-create-pr:
     runs-on: ubuntu-latest
     steps:
+      - name: Configure AWS credentials for BOT secrets
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE_ARN_PYPI_RELEASE }}
+          aws-region: ${{ env.AWS_DEFAULT_REGION }}
+
+      - name: Get Bot secrets
+        uses: aws-actions/aws-secretsmanager-get-secrets@v1
+        id: bot_secrets
+        with:
+          secret-ids: |
+            BOT_TOKEN ,${{ secrets.BOT_TOKEN_SECRET_ARN }}
+          parse-json-secrets: true
+
       - name: Checkout main branch
         uses: actions/checkout@v3
         with:
           ref: 'main'
+          token: ${{ env.BOT_TOKEN_GITHUB_RW_PATOKEN }}
 
       - name: Setup Git
         run: |