diff --git a/sdk/src/Core/Amazon.Runtime/Credentials/URIBasedRefreshingCredentialHelper.cs b/sdk/src/Core/Amazon.Runtime/Credentials/URIBasedRefreshingCredentialHelper.cs
index 37f11f58161a..9c3d7c7d176d 100644
--- a/sdk/src/Core/Amazon.Runtime/Credentials/URIBasedRefreshingCredentialHelper.cs
+++ b/sdk/src/Core/Amazon.Runtime/Credentials/URIBasedRefreshingCredentialHelper.cs
@@ -85,9 +85,12 @@ protected static T GetObjectFromResponse<T, TC>(Uri uri, IWebProxy proxy, Dictio
                 Amazon.Util.Internal.JsonSerializerContext,
 #endif
                 new()
+            where T : SecurityBase
         {
             string json = GetContents(uri, proxy, headers);
-            return JsonSerializerHelper.Deserialize<T>(json, new TC());
+            var result = JsonSerializerHelper.Deserialize<T>(json, new TC());
+            ValidateResponse(result);
+            return result;
         }
 
         protected static void ValidateResponse(SecurityBase response)