diff --git a/.evergreen/config.yml b/.evergreen/config.yml
index 8938242..a81edd1 100644
--- a/.evergreen/config.yml
+++ b/.evergreen/config.yml
@@ -29,11 +29,15 @@ functions:
         directory: "src"
 
   "fetch secrets":
+    - command: ec2.assume_role
+      params:
+        role_arn: ${drivers_test_secrets_role}
     - command: subprocess.exec
       type: setup
       params:
         working_dir: "src"
         binary: bash
+        include_expansions_in_env: [AWS_SECRET_ACCESS_KEY, AWS_ACCESS_KEY_ID, AWS_SESSION_TOKEN]
         args: [.evergreen/fetch-secrets.sh]
 
   "fetch repo":