diff --git a/app/controllers/StoryPackagesBaseController.scala b/app/controllers/StoryPackagesBaseController.scala
index a6c9d86..7f7d08e 100644
--- a/app/controllers/StoryPackagesBaseController.scala
+++ b/app/controllers/StoryPackagesBaseController.scala
@@ -1,6 +1,6 @@
 package controllers
 
-import com.gu.pandomainauth.PanDomainAuthSettingsRefresher
+import com.gu.pandomainauth.{PanDomainAuthSettingsRefresher, S3BucketLoader}
 import conf.ApplicationConfiguration
 import play.api.libs.ws.WSClient
 import play.api.mvc.{BaseController, ControllerComponents}
@@ -14,11 +14,12 @@ abstract class StoryPackagesBaseController(
   final override val controllerComponents: ControllerComponents = components
 
   lazy val panDomainSettings: PanDomainAuthSettingsRefresher =
-    new PanDomainAuthSettingsRefresher(
-      config.pandomain.domain,
-      config.pandomain.service,
-      config.pandomain.bucketName,
-      config.pandomain.settingsFileKey,
-      config.aws.s3Client.get
+    PanDomainAuthSettingsRefresher(
+      domain = config.pandomain.domain,
+      system = config.pandomain.service,
+      S3BucketLoader.forAwsSdkV1(
+      config.aws.s3Client.get,
+        "pan-domain-auth-settings"
+      )
     )
 }
diff --git a/build.sbt b/build.sbt
index 032863c..0c60a60 100644
--- a/build.sbt
+++ b/build.sbt
@@ -67,7 +67,7 @@ libraryDependencies ++= jacksonOverrides ++  Seq(
     "com.gu" %% "content-api-models-json" % capiModelsVersion,
     "com.gu" %% "content-api-client-aws" % "0.7.5",
     "com.gu" %% "fapi-client-play30" % "12.0.0",
-    "com.gu" %% "pan-domain-auth-play_3-0" % "4.0.0",
+    "com.gu" %% "pan-domain-auth-play_3-0" % "7.0.0",
     "com.gu" %% "editorial-permissions-client" % "2.15",
     "com.gu" %% "story-packages-model" % "2.2.0",
     "com.gu" %% "thrift-serializer" % "4.0.2",