diff --git a/.github/workflows/analytics-metadata-updater.yml b/.github/workflows/analytics-metadata-updater.yml
index 8ff5d40b98d29..ef540e93aaf09 100644
--- a/.github/workflows/analytics-metadata-updater.yml
+++ b/.github/workflows/analytics-metadata-updater.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   update-analytics-metadata:
-    if: github.repository == 'aws/aws-cdk'
+    if: github.repository == 'aws/aws-cdk' && github.actor == 'aws-cdk-automation'
     runs-on: ubuntu-latest
     permissions:
       contents: write
diff --git a/.github/workflows/lambda-runtime-tests.yml b/.github/workflows/lambda-runtime-tests.yml
index 6ab0dd0087da5..f14ebe4a8e48e 100644
--- a/.github/workflows/lambda-runtime-tests.yml
+++ b/.github/workflows/lambda-runtime-tests.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   update-lambda-tests:
-    if: github.repository == 'aws/aws-cdk'
+    if: github.repository == 'aws/aws-cdk' && github.actor == 'aws-cdk-automation'
     runs-on: ubuntu-latest
     permissions:
       contents: write