diff --git a/tools/ghsecrets/README.md b/tools/ghsecrets/README.md
index 75bfbc3b1..652b49036 100644
--- a/tools/ghsecrets/README.md
+++ b/tools/ghsecrets/README.md
@@ -30,9 +30,9 @@ By default, `ghsecrets set` assumes you want to store secrets in AWS Secrets Man
 > **⚠️ Note:** Ensure you authenticate with AWS before using the tool:
 >
 > ```sh
-> aws sso login --profile <your-aws-sdlc-profile>
+> aws sso login --profile <your-aws-sdlc-profile-with-poweruser-role>
 > ```
-> Use the **SDLC** profile in AWS 
+> Use the **SDLC** profile in AWS with **PowerUserAccess** role 
 
 This will read from `~/.testsecrets` (by default) and create/update a secret in AWS Secrets Manager: