diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
new file mode 100644
index 0000000..6f0eb18
--- /dev/null
+++ b/.github/workflows/deploy.yml
@@ -0,0 +1,53 @@
+name: Deploy Staging Frontend
+
+on:
+  push:
+    branches:
+      - deploy
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        environment: [stacadmin-eoapirisk-demo]
+    runs-on: ubuntu-latest
+    environment: ${{ matrix.environment }}
+
+    steps:
+      - name: Setup Node.js
+        uses: actions/setup-node@v2
+        with:
+          node-version: 18
+
+      - name: Check out repository code
+        uses: actions/checkout@v2
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Build code
+        env:
+          REACT_APP_STAC_API: ${{ secrets.STAC_API }}
+        run: npm run build
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        env:
+          ROLE: ${{ secrets.DEPLOY_ROLE_ARN }}
+        with:
+          role-to-assume: ${{ env.ROLE }}
+          aws-region: us-west-2
+
+      - name: Sync with S3 bucket
+        env:
+          BUCKET: ${{ secrets.S3_BUCKET }}
+        run: |
+          aws s3 sync \
+            ./build "s3://${BUCKET}" \
+            --acl public-read \
+            --follow-symlinks \
+            --delete