diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index a584a484a..c638f9479 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -322,25 +322,12 @@ jobs:
           chartpress ${{ matrix.chartpress_args || '--skip-build' }}
 
       - name: "Stage 4: Deploy to ${{ matrix.federation_member }}"
-        if: matrix.federation_member != 'curvenote'
         run: |
           . cert-manager.env
           python ./deploy.py ${{ matrix.federation_member }} ${{ matrix.cluster_name || matrix.federation_member }} --name ${{ matrix.release_name || matrix.federation_member }}
         env:
           TERM: xterm
 
-      - name: "Stage 4: Deploy to ${{ matrix.federation_member }}"
-        # TODO: fix ban.py to work on AWS/curvenote
-        if: matrix.federation_member == 'curvenote'
-        run: |
-          . cert-manager.env
-          for stage in auth kubesystem certmanager mybinder; do
-            echo $stage
-            python ./deploy.py ${{ matrix.federation_member }} ${{ matrix.cluster_name || matrix.federation_member }} --name ${{ matrix.release_name || matrix.federation_member }} --stage $stage
-          done
-        env:
-          TERM: xterm
-
       - name: "Stage 4: Verify ${{ matrix.federation_member }} works"
         uses: nick-invision/retry@14672906e672a08bd6eeb15720e9ed3ce869cdd4
         with:
diff --git a/secrets/ban.py b/secrets/ban.py
index 008ea2398..e6cb52c8a 100755
Binary files a/secrets/ban.py and b/secrets/ban.py differ