diff --git a/cfn/CI.yaml b/cfn/CI.yaml
index 10ef4d712..f449b9d4a 100644
--- a/cfn/CI.yaml
+++ b/cfn/CI.yaml
@@ -66,11 +66,16 @@ Resources:
         {
           "Version": "2012-10-17",   
           "Statement": [
-          {
+            {
               "Effect": "Allow",
               "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-ESDK-Dafny-Role-us-west-2" },
               "Action": "sts:AssumeRole"
             },
+            {
+              "Effect": "Allow",
+              "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" },
+              "Action": "sts:AssumeRole"
+            },
             {
               "Effect": "Allow",
               "Principal": { "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/token.actions.githubusercontent.com" },
@@ -103,11 +108,16 @@ Resources:
         {
           "Version": "2012-10-17",   
           "Statement": [
-          {
+            {
               "Effect": "Allow",
               "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-ESDK-Dafny-Role-us-west-2" },
               "Action": "sts:AssumeRole"
             },
+            {
+              "Effect": "Allow",
+              "Principal": { "AWS": "arn:aws:iam::370957321024:role/GitHub-CI-Public-ESDK-Dafny-Role-us-west-2" },
+              "Action": "sts:AssumeRole"
+            },
             {
               "Effect": "Allow",
               "Principal": { "Federated": "arn:aws:iam::${AWS::AccountId}:oidc-provider/token.actions.githubusercontent.com" },