Unable to assume role with web token identity in long running apply

Terraform Providers AWS
1

I have a Terraform apply pipeline that takes about 20 minutes to complete and it’s run by the GitHub actions with the following provider configuration:

provider "aws" {
  region = "eu-west-1"
  assume_role_with_web_identity {
    role_arn                = $ROLE_ARN
    web_identity_token_file = $GITHUB_WEB_TOKEN_FILE
  }
}

Both $ROLE_ARN and $GITHUB_WEB_TOKEN_FILE are valid when the pipeline starts as I can see Terraform refreshing AWS resource status.
However, after about 10 minutes of the pipeline running, I receive the following error:

Error: failed to retrieve credentials, operation error STS:
│ AssumeRoleWithWebIdentity, https response error StatusCode: 400, RequestID:
│ cdb9d241-6b4c-407d-ae9f-979a45911c4f, ExpiredTokenException: Token expired:
│ current date/time 1781095965 must be before the expiration date/time
│ 1781095793

I suspect it’s caused by the GitHub web token expiration, which is valid for 5 minutes. I can see from my AWS CloudTrail successful AssumeRoleWithWebIdentity event from the GitHub action when it started the pipeline and the assume role session duration is valid for 1 hour.

I’d like to know if the AWS provider may request additional AssumeRoleWithWebIdentity action after the GitHub web token has expired? If so, is there a way to work around it?