diff --git a/.github/workflows/deploy-stack.yml b/.github/workflows/deploy-stack.yml
index daa3af1d29..a618069abc 100644
--- a/.github/workflows/deploy-stack.yml
+++ b/.github/workflows/deploy-stack.yml
@@ -46,6 +46,8 @@ jobs:
       environment: ${{ inputs.environment }}
       service: ${{ matrix.service }}
       version: ${{ inputs.version }}
+    needs:
+      - invoke-and-check-cdn
     secrets: inherit
 
   set-maintenance-mode:
@@ -53,7 +55,7 @@ jobs:
     with:
       environment: ${{ inputs.environment }}
     needs:
-      - check-cdn
+      - invoke-and-check-cdn
     secrets: inherit
 
   down: # the backend services
diff --git a/.github/workflows/invoke-and-check-invalidations.yml b/.github/workflows/invoke-and-check-invalidations.yml
index f4e7c45002..f60a5c5041 100644
--- a/.github/workflows/invoke-and-check-invalidations.yml
+++ b/.github/workflows/invoke-and-check-invalidations.yml
@@ -26,7 +26,7 @@ jobs:
       - name: Invalidate web cache
         run: |
           aws cloudfront create-invalidation --distribution-id ${{ secrets.CLOUDFRONT_DIST_ID }} \
-          --paths "/cyclone/stable/* /sdf/stable/* /rebaser/stable/* /pinga/stable/* /veritech/stable/*" \
+          --paths "/cyclone/stable/*" "/sdf/stable/*" "/rebaser/stable/*" "/pinga/stable/*" "/veritech/stable/*" \
           --query 'Invalidation.Id' --output text
 
       - name: Checkout code