diff --git a/cmd/osbuild-service-maintenance/aws.go b/cmd/osbuild-service-maintenance/aws.go
index ea88033e1..29c8402da 100644
--- a/cmd/osbuild-service-maintenance/aws.go
+++ b/cmd/osbuild-service-maintenance/aws.go
@@ -91,9 +91,14 @@ func AWSCleanup(maxConcurrentRequests int, dryRun bool, accessKeyID, accessKey s
 	}
 
 	instanceIDs := filterReservations(reservations)
-	err = a.TerminateInstances(instanceIDs)
-	if err != nil {
-		return fmt.Errorf("Unable to terminate secure instances: %w", err)
+	logrus.Infof("Cleaning up executor instances: %v", instanceIDs)
+	if !dryRun {
+		err = a.TerminateInstances(instanceIDs)
+		if err != nil {
+			return fmt.Errorf("Unable to terminate secure instances: %w", err)
+		}
+	} else {
+		logrus.Info("Dry run, didn't actually terminate any instances")
 	}
 	return nil
 }