diff --git a/docs/pages/reference/machine-id/configuration.mdx b/docs/pages/reference/machine-id/configuration.mdx
index e332294f4e0b2..f5d082ff221ac 100644
--- a/docs/pages/reference/machine-id/configuration.mdx
+++ b/docs/pages/reference/machine-id/configuration.mdx
@@ -506,6 +506,17 @@ session_duration: 6h
 # be renewed. This should be less than the session duration. If omitted, this
 # defaults to 1 hour.
 session_renewal_interval: 1h
+# credential_profile_name is the name of the profile to write to in the AWS
+# credentials file. If unspecified, this profile will be named `default`.
+credential_profile_name: my-profile
+# artifact_name is the name of the file that the AWS credentials should be
+# written to. If unspecified, this defaults to `aws_credentials`.
+artifact_name: my-credentials-file
+# overwrite_credential_file controls whether the AWS credentials file should be
+# overwritten if it already exists, or whether the profile added by tbot should
+# be merged with any existing profiles in the file. If unspecified, this
+# defaults to `false`.
+overwrite_credential_file: false
 (!docs/pages/includes/machine-id/workload-identity-selector-config.yaml!)
 ```