diff --git a/website/content/docs/concepts/lease.mdx b/website/content/docs/concepts/lease.mdx index 46f4a73c94..707785b2f2 100644 --- a/website/content/docs/concepts/lease.mdx +++ b/website/content/docs/concepts/lease.mdx @@ -31,9 +31,9 @@ access keys will be deleted from AWS the moment a lease is revoked. This renders the access keys invalid from that point forward. Revocation can happen manually via the API, via the `vault lease revoke` cli command, -or automatically by Vault. When a lease is expired, Vault will automatically -revoke that lease. When a token is revoked, Vault will revoke all leases that -were created using that token. +the user interface (UI) under the Access tab, or automatically by Vault. When a lease +is expired, Vault will automatically revoke that lease. When a token is revoked, +Vault will revoke all leases that were created using that token. **Note**: The [Key/Value Backend](/docs/secrets/kv) which stores arbitrary secrets does not issue leases although it will sometimes return a