diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2c34d06d7..5f8aacc48 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,7 +17,8 @@ IMPROVEMENTS:
 * `resource/transit_secret_backend_key`: Add `auto_rotate_interval` parameter support to Transit Key Backend ([#1345](https://github.com/hashicorp/terraform-provider-vault/pull/1345))
 * `resource/consul_secret_backend_role`: Add support for Consul role ([#1366](https://github.com/hashicorp/terraform-provider-vault/pull/1366))
 * `resource/consul_secret_backend_role`: Add support for Consul namespaces and partitions ([#1367](https://github.com/hashicorp/terraform-provider-vault/pull/1367))
-* `resource/github_auth_backend`: Add support for `organization_id field` ([#1296](https://github.com/hashicorp/terraform-provider-vault/pull/1296))
+* `resource/github_auth_backend`: Add support for `organization_id` field ([#1296](https://github.com/hashicorp/terraform-provider-vault/pull/1296))
+* `resource/approle_auth_backend_role_secret_id`: Add `with_wrapped_accessor` to control how the resource ID is set ([#1166](https://github.com/hashicorp/terraform-provider-vault/pull/1166))
 
 ## 3.3.1 (February 25, 2022)
 BUGS:
diff --git a/website/docs/r/approle_auth_backend_role_secret_id.html.md b/website/docs/r/approle_auth_backend_role_secret_id.html.md
index 37fa6a4bb..ebae79f7b 100644
--- a/website/docs/r/approle_auth_backend_role_secret_id.html.md
+++ b/website/docs/r/approle_auth_backend_role_secret_id.html.md
@@ -29,11 +29,11 @@ resource "vault_approle_auth_backend_role_secret_id" "id" {
   backend   = vault_auth_backend.approle.path
   role_name = vault_approle_auth_backend_role.example.role_name
 
-  metadata = <<EOT
-  {
-    "hello": "world"
-  }
-  EOT
+  metadata = jsonencode(
+    {
+      "hello" = "world"
+    }
+  )
 }
 ```
 
@@ -57,6 +57,10 @@ The following arguments are supported:
   and available for the duration specified. Only a single unwrapping of the
   token is allowed.
 
+* `with_wrapped_accessor` - (Optional) Set to `true` to use the wrapped secret-id accessor as the resource ID.
+  If `false` (default value), a fresh secret ID will be regenerated whenever the wrapping token is expired or
+  invalidated through unwrapping.
+
 ## Attributes Reference
 
 In addition to the fields above, the following attributes are exported: