diff --git a/.github/workflows/build-node-and-runtime.yml b/.github/workflows/build-node-and-runtime.yml
index 3cfe155af0..4c9d4597b1 100644
--- a/.github/workflows/build-node-and-runtime.yml
+++ b/.github/workflows/build-node-and-runtime.yml
@@ -18,6 +18,8 @@ jobs:
     runs-on: ubuntu-20.04
     env:
       RUST_BACKTRACE: full
+      SECRETS_AWS_MAINNET_ACCESS_KEY_ID: ${{ secrets.AWS_MAINNET_ACCESS_KEY_ID }}
+      SECRETS_AWS_MAINNET_SECRET_ACCESS_KEY: ${{ secrets.AWS_MAINNET_SECRET_ACCESS_KEY }}
     steps:
       - name: Checkout source code
         uses: actions/checkout@v2
@@ -65,6 +67,7 @@ jobs:
           retention-days: 7
 
       - name: S3 CI | Configure AWS credentials
+        if: env.SECRETS_AWS_MAINNET_ACCESS_KEY_ID != '' && env.SECRETS_AWS_MAINNET_SECRET_ACCESS_KEY != ''
         uses: aws-actions/configure-aws-credentials@v1
         env:
           AWS_REGION: us-east-1
@@ -74,6 +77,7 @@ jobs:
           aws-region: ${{ env.AWS_REGION }}
 
       - name: S3 CI | Copy release binary to S3 bucket
+        if: env.SECRETS_AWS_MAINNET_ACCESS_KEY_ID != '' && env.SECRETS_AWS_MAINNET_SECRET_ACCESS_KEY != ''
         shell: bash
         env:
           BINARY_DIR: target/production
@@ -85,6 +89,7 @@ jobs:
           aws s3 cp ${{ env.S3BUCKET_FILE }} ${{ env.S3BUCKET_URL }}/${{ env.S3BUCKET_FILE }}
 
       - name: S3 CI | Copy release runtime to S3 bucket
+        if: env.SECRETS_AWS_MAINNET_ACCESS_KEY_ID != '' && env.SECRETS_AWS_MAINNET_SECRET_ACCESS_KEY != ''
         shell: bash
         env:
           BINARY_DIR: target/production/wbuild/aleph-runtime
@@ -115,6 +120,7 @@ jobs:
           retention-days: 7
 
       - name: S3 CI | Copy test binary to S3 bucket
+        if: env.SECRETS_AWS_MAINNET_ACCESS_KEY_ID != '' && env.SECRETS_AWS_MAINNET_SECRET_ACCESS_KEY != ''
         shell: bash
         env:
           BINARY_DIR: target/release
@@ -126,6 +132,7 @@ jobs:
           aws s3 cp ${{ env.S3BUCKET_FILE }} ${{ env.S3BUCKET_URL }}/${{ env.S3BUCKET_FILE }}
 
       - name: S3 CI | Copy test runtime to S3 bucket
+        if: env.SECRETS_AWS_MAINNET_ACCESS_KEY_ID != '' && env.SECRETS_AWS_MAINNET_SECRET_ACCESS_KEY != ''
         shell: bash
         env:
           BINARY_DIR: target/release/wbuild/aleph-runtime