diff --git a/.circleci/config.yml b/.circleci/config.yml
index 124fb037..c2608b1b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -74,6 +74,10 @@ jobs:
             curl -L https://github.com/ovotech/cloud-key-rotator/releases/download/v${VERSION}/${TARGET_FILE} -O
             pip3 install awscli
             aws s3 cp $TARGET_FILE s3://ckr-terraform-module-code --acl public-read
+            # publish source to bucket in ap-southeast-2 so cloud-key-rotator can be used in that region
+            export AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID_PROD_ENG
+            export AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY_PROD_ENG
+            aws s3 cp $TARGET_FILE s3://ckr-terraform-module-code-ap-southeast-2 --acl public-read
   tf_check_aws:
     executor: terraform/default
     steps: