diff --git a/.github/workflows/deploy.boltz.mainnet.yml b/.github/workflows/deploy.boltz.mainnet.yml
index 2d7ca8a..c7bc55f 100644
--- a/.github/workflows/deploy.boltz.mainnet.yml
+++ b/.github/workflows/deploy.boltz.mainnet.yml
@@ -5,6 +5,8 @@ on:
   push:
     tags:
       - '**stable-boltzmainnet**'
+    branches:
+      - cd-boltz-mainnet
 
 jobs:
   deploy-boltz-mainnet:
@@ -23,7 +25,7 @@ jobs:
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
         with:
           role-to-assume: ${{ secrets.BOLTZ_MAINNET_ROLE_ARN }}
-          aws-region: "${{ secrets.BOLTZ_MAINNET_AWS_REGION }}"
+          aws-region: ${{ secrets.BOLTZ_MAINNET_AWS_REGION }}
 
       - name: Deploy rif-relay-server on Boltz Mainnet
         run: |