diff --git a/README.md b/README.md
index 03f7a43e2..7c26e583b 100644
--- a/README.md
+++ b/README.md
@@ -364,6 +364,12 @@ Outputs:
     Value: !GetAtt Role.Arn 
 ```
 
+For GHES, please replace the following three places:
+
+Change the Url of GithubOidc from https://token.actions.githubusercontent.com to your GitHub Enterprise Server hostname https://<GHES_hostname>/_services/token. 
+
+Additionally, replace token.actions.githubusercontent.com in both StringEquals and StringLike with <GHES_hostname>.
+
 ### Claims and scoping permissions
 To align with the Amazon IAM best practice of [granting least
 privilege](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege),