diff --git a/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-aws.yaml b/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-aws.yaml
index a8a5a76..f05730f 100644
--- a/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-aws.yaml
+++ b/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-aws.yaml
@@ -8,8 +8,6 @@ metadata:
   name: upbound-provider-aws-ecs
 spec:
   package: #@ data.values.crossplane.repo + "/provider-aws-ecs:" + data.values.crossplane.tag
-  controllerConfigRef:
-    name: upbound-provider-aws
 ---
 apiVersion: pkg.crossplane.io/v1
 kind: Provider
@@ -19,8 +17,6 @@ metadata:
   name: upbound-provider-aws-ec2
 spec:
   package: #@ data.values.crossplane.repo + "/provider-aws-ec2:" + data.values.crossplane.tag
-  controllerConfigRef:
-    name: upbound-provider-aws
 ---
 apiVersion: pkg.crossplane.io/v1
 kind: Provider
@@ -30,5 +26,3 @@ metadata:
   name: upbound-provider-aws-elbv2
 spec:
   package: #@ data.values.crossplane.repo + "/provider-aws-elbv2:" + data.values.crossplane.tag
-  controllerConfigRef:
-    name: upbound-provider-aws
diff --git a/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-config.yaml b/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-config.yaml
index d4f05ac..5c79579 100644
--- a/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-config.yaml
+++ b/manifests/tap-ecs-supplychain.tanzu.japan.com/1.7.1/crossplane/provider-config.yaml
@@ -22,18 +22,6 @@ metadata:
      kapp.k14s.io/change-rule: "upsert after upserting crd"
 spec:
   credentials:
-    source: IRSA
----
-apiVersion: pkg.crossplane.io/v1alpha1
-kind: ControllerConfig
-metadata:
-  name: upbound-provider-aws
-  annotations:
-    eks.amazonaws.com/role-arn: #@ 'arn:aws:iam::' + data.values.aws.accountId + ':role/' + data.values.aws.roleName
-spec:
-  podSecurityContext:
-    fsGroup: 2000
-  args:
-  - '--debug'
-  - '--poll=2m'
-  - '--max-reconcile-rate=10'
+    source: WebIdentity
+    webIdentity:
+      roleARN: #@ 'arn:aws:iam::' + data.values.aws.accountId + ':role/' + data.values.aws.roleName