diff --git a/cluster-scope/components/nerc-certificate-issuer/aws-route53-credentials.yaml b/cluster-scope/components/nerc-certificate-issuer/aws-route53-credentials.yaml
index af9afb85..f3c26fbe 100644
--- a/cluster-scope/components/nerc-certificate-issuer/aws-route53-credentials.yaml
+++ b/cluster-scope/components/nerc-certificate-issuer/aws-route53-credentials.yaml
@@ -18,4 +18,4 @@ spec:
         labels: {}
   dataFrom:
     - extract:
-        key: nerc/nerc-ocp-prod/aws-route53-credentials
+        key: REPLACE_IN_OVERLAY
diff --git a/cluster-scope/overlays/nerc-ocp-prod/kustomization.yaml b/cluster-scope/overlays/nerc-ocp-prod/kustomization.yaml
index 79e7b6be..228fcb0d 100644
--- a/cluster-scope/overlays/nerc-ocp-prod/kustomization.yaml
+++ b/cluster-scope/overlays/nerc-ocp-prod/kustomization.yaml
@@ -91,6 +91,13 @@ patches:
     - op: replace
       path: /spec/data/0/remoteRef/key
       value: nerc/nerc-ocp-prod/openshift-config/oauths-clientsecret-nerc
+- target:
+    kind: ExternalSecret
+    name: aws-route53-credentials
+  patch: |
+    - op: replace
+      path: /spec/dataFrom/0/extract/key
+      value: nerc/nerc-ocp-prod/aws-route53-credentials
 - target:
     kind: ExternalSecret
     name: github-client-secret