diff --git a/build-tools/automation/azure-pipelines-nightly.yaml b/build-tools/automation/azure-pipelines-nightly.yaml
index a71b2ac0872..49a37060c02 100644
--- a/build-tools/automation/azure-pipelines-nightly.yaml
+++ b/build-tools/automation/azure-pipelines-nightly.yaml
@@ -289,8 +289,8 @@ stages:
   - job: api_scan
     displayName: API Scan
     pool:
-      name: Azure Pipelines
-      vmImage: windows-2022
+      name: MAUI-1ESPT
+      demands: ImageOverride -equals $(WindowsPoolImage1ESPT)
     timeoutInMinutes: 480
     workspace:
       clean: all
@@ -335,7 +335,7 @@ stages:
         isLargeApp: true
         toolVersion: Latest
       env:
-        AzureServicesAuthConnectionString: runAs=App;AppId=$(ApiScanClientId);TenantId=$(ApiScanTenant);AppKey=$(ApiScanSecret)
+        AzureServicesAuthConnectionString: runAs=App;AppId=$(ApiScanMAUI1ESPTManagedId)
 
     - task: SdtReport@2
       displayName: Guardian Export - Security Report