diff --git a/bundle/manifests/oadp-operator.clusterserviceversion.yaml b/bundle/manifests/oadp-operator.clusterserviceversion.yaml
index 4eb18bb4350..85829a4b83f 100644
--- a/bundle/manifests/oadp-operator.clusterserviceversion.yaml
+++ b/bundle/manifests/oadp-operator.clusterserviceversion.yaml
@@ -1164,6 +1164,8 @@ spec:
                 - mountPath: /var/run/secrets/openshift/serviceaccount
                   name: bound-sa-token
                   readOnly: true
+                - mountPath: /tmp
+                  name: tmp-dir
               securityContext:
                 runAsNonRoot: true
               serviceAccountName: openshift-adp-controller-manager
@@ -1176,6 +1178,8 @@ spec:
                       audience: openshift
                       expirationSeconds: 3600
                       path: token
+              - emptyDir: {}
+                name: tmp-dir
       permissions:
       - rules:
         - apiGroups:
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
index 5fe3e337dae..8ea9317eabc 100644
--- a/config/manager/manager.yaml
+++ b/config/manager/manager.yaml
@@ -51,6 +51,8 @@ spec:
             - mountPath: /var/run/secrets/openshift/serviceaccount
               name: bound-sa-token
               readOnly: true
+            - mountPath: /tmp
+              name: tmp-dir
           env:
             - name: WATCH_NAMESPACE
               valueFrom:
@@ -126,4 +128,6 @@ spec:
                   path: token
                   expirationSeconds: 3600
                   audience: openshift
+        - name: tmp-dir
+          emptyDir: {}
       terminationGracePeriodSeconds: 10
diff --git a/pkg/bucket/client.go b/pkg/bucket/client.go
index 092d5b62910..a4c72139718 100644
--- a/pkg/bucket/client.go
+++ b/pkg/bucket/client.go
@@ -4,7 +4,6 @@ import (
 	"context"
 	"errors"
 	"fmt"
-	"io/ioutil"
 	"os"
 	"path/filepath"
 
@@ -91,7 +90,7 @@ func SharedCredentialsFileFromSecret(secret *corev1.Secret) (string, error) {
 		return "", errors.New("invalid secret for aws credentials")
 	}
 
-	f, err := ioutil.TempFile("", "aws-shared-credentials")
+	f, err := os.CreateTemp("", "aws-shared-credentials")
 	if err != nil {
 		return "", err
 	}