diff --git a/website/content/api-docs/system/storage/raftautosnapshots.mdx b/website/content/api-docs/system/storage/raftautosnapshots.mdx index 9973d0eb7a..5cf629593e 100644 --- a/website/content/api-docs/system/storage/raftautosnapshots.mdx +++ b/website/content/api-docs/system/storage/raftautosnapshots.mdx @@ -67,6 +67,16 @@ environment variables or files on disk in predefined locations. #### storage_type=aws-s3 + + +Vault cannot use AWS IAM roles with EKS service accounts for authentication to +save automated integrated storage snapshots to Amazon S3 buckets. You must set +the [`aws_access_key_id`](/vault/api-docs/system/storage/raftautosnapshots#aws_access_key_id) +and [`aws_secret_access_key`](/vault/api-docs/system/storage/raftautosnapshots#aws_secret_access_key) +parameters in the context of AWS EKS & S3 configuration. + + + - `aws_s3_bucket` `(string: )` - S3 bucket to write snapshots to. - `aws_s3_region` `(string: )` - AWS region bucket is in. diff --git a/website/content/docs/enterprise/automated-integrated-storage-snapshots.mdx b/website/content/docs/enterprise/automated-integrated-storage-snapshots.mdx index 20939ff4a7..13455e81e6 100644 --- a/website/content/docs/enterprise/automated-integrated-storage-snapshots.mdx +++ b/website/content/docs/enterprise/automated-integrated-storage-snapshots.mdx @@ -37,9 +37,11 @@ object store. -Currently, Vault does not allow the use of AWS IAM Roles for EKS Service -Accounts to authenticate to Amazon S3 buckets for the Automated Integrated -Storage Snapshots. +Vault cannot use AWS IAM roles with EKS service accounts for authentication to +save automated integrated storage snapshots to Amazon S3 buckets. You must set +the [`aws_access_key_id`](/vault/api-docs/system/storage/raftautosnapshots#aws_access_key_id) +and [`aws_secret_access_key`](/vault/api-docs/system/storage/raftautosnapshots#aws_secret_access_key) +parameters in the context of AWS EKS & S3 configuration.