From aee59ff0d705c15c36bf8a973d2c4a7fd1a18f98 Mon Sep 17 00:00:00 2001
From: Anil Gupta <90670783+anil-db@users.noreply.github.com>
Date: Tue, 29 Apr 2025 17:00:17 -0700
Subject: [PATCH 1/6] allow to provide aws session token

---
 changelog.d/aws-auth-session-token.enhancement.md         | 5 +++++
 src/aws/auth.rs                                           | 8 +++++++-
 website/cue/reference/base/configuration.cue              | 5 +++++
 .../components/sinks/base/aws_cloudwatch_logs.cue         | 5 +++++
 .../components/sinks/base/aws_cloudwatch_metrics.cue      | 5 +++++
 .../components/sinks/base/aws_kinesis_firehose.cue        | 5 +++++
 .../components/sinks/base/aws_kinesis_streams.cue         | 5 +++++
 website/cue/reference/components/sinks/base/aws_s3.cue    | 5 +++++
 website/cue/reference/components/sinks/base/aws_sns.cue   | 5 +++++
 website/cue/reference/components/sinks/base/aws_sqs.cue   | 5 +++++
 .../cue/reference/components/sinks/base/elasticsearch.cue | 6 ++++++
 .../components/sinks/base/prometheus_remote_write.cue     | 6 ++++++
 website/cue/reference/components/sources/base/aws_s3.cue  | 5 +++++
 website/cue/reference/components/sources/base/aws_sqs.cue | 5 +++++
 14 files changed, 74 insertions(+), 1 deletion(-)
 create mode 100644 changelog.d/aws-auth-session-token.enhancement.md

diff --git a/changelog.d/aws-auth-session-token.enhancement.md b/changelog.d/aws-auth-session-token.enhancement.md
new file mode 100644
index 0000000000000..ddd5e055cfaa3
--- /dev/null
+++ b/changelog.d/aws-auth-session-token.enhancement.md
@@ -0,0 +1,5 @@
+Adds session token support to the aws auth options. Session token is required with access id and secret keys when using temporary credentials.
+If temporary credentials is created and supplied by another external system.
+Update to these temporary credentials can be done by external system using `SECRET` backend.
+
+authors: anil-db
diff --git a/src/aws/auth.rs b/src/aws/auth.rs
index 1b8aa111eec33..7d31dd30ed591 100644
--- a/src/aws/auth.rs
+++ b/src/aws/auth.rs
@@ -71,6 +71,10 @@ pub enum AwsAuthentication {
         #[configurable(metadata(docs::examples = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"))]
         secret_access_key: SensitiveString,
 
+        /// The AWS session token.
+        #[configurable(metadata(docs::examples = "AQoDYXdz...AQoDYXdz..."))]
+        session_token: Option<SensitiveString>,
+
         /// The ARN of an [IAM role][iam_role] to assume.
         ///
         /// [iam_role]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
@@ -275,11 +279,12 @@ impl AwsAuthentication {
                 external_id,
                 region,
                 session_name,
+                session_token,
             } => {
                 let provider = SharedCredentialsProvider::new(Credentials::from_keys(
                     access_key_id.inner(),
                     secret_access_key.inner(),
-                    None,
+                    session_token.clone().map(|v| v.inner().into()),
                 ));
                 if let Some(assume_role) = assume_role {
                     let auth_region = region.clone().map(Region::new).unwrap_or(service_region);
@@ -372,6 +377,7 @@ impl AwsAuthentication {
             external_id: None,
             region: None,
             session_name: None,
+            session_token: None,
         }
     }
 }
diff --git a/website/cue/reference/base/configuration.cue b/website/cue/reference/base/configuration.cue
index 4bd38192b11b7..e634712024d30 100644
--- a/website/cue/reference/base/configuration.cue
+++ b/website/cue/reference/base/configuration.cue
@@ -364,6 +364,11 @@ base: configuration: configuration: {
 														"""
 						required: false
 					}
+					session_token: {
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+						description: "The AWS session token."
+						required:    false
+					}
 					credentials_file: {
 						type: string: examples: ["/my/aws/credentials"]
 						description: "Path to the credentials file."
diff --git a/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue b/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
index 7b53d05fa3455..15bde98f7359a 100644
--- a/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
+++ b/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
@@ -139,6 +139,11 @@ base: components: sinks: aws_cloudwatch_logs: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	batch: {
diff --git a/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue b/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
index c2ced75b95861..ac8b1736ad4e5 100644
--- a/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
+++ b/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
@@ -139,6 +139,11 @@ base: components: sinks: aws_cloudwatch_metrics: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	batch: {
diff --git a/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue b/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
index b3319428648ba..8c00e97c2ada7 100644
--- a/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
+++ b/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
@@ -139,6 +139,11 @@ base: components: sinks: aws_kinesis_firehose: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	batch: {
diff --git a/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue b/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
index fb53b59f1b3d1..03290dca27afd 100644
--- a/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
+++ b/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
@@ -139,6 +139,11 @@ base: components: sinks: aws_kinesis_streams: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	batch: {
diff --git a/website/cue/reference/components/sinks/base/aws_s3.cue b/website/cue/reference/components/sinks/base/aws_s3.cue
index c7ebd5f2fe1ba..d9a8a868d9cdf 100644
--- a/website/cue/reference/components/sinks/base/aws_s3.cue
+++ b/website/cue/reference/components/sinks/base/aws_s3.cue
@@ -214,6 +214,11 @@ base: components: sinks: aws_s3: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	batch: {
diff --git a/website/cue/reference/components/sinks/base/aws_sns.cue b/website/cue/reference/components/sinks/base/aws_sns.cue
index 8953e1893f24d..444cd5e35e6e1 100644
--- a/website/cue/reference/components/sinks/base/aws_sns.cue
+++ b/website/cue/reference/components/sinks/base/aws_sns.cue
@@ -139,6 +139,11 @@ base: components: sinks: aws_sns: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	encoding: {
diff --git a/website/cue/reference/components/sinks/base/aws_sqs.cue b/website/cue/reference/components/sinks/base/aws_sqs.cue
index 0fcfe80f4f0b0..cb9ebc580996e 100644
--- a/website/cue/reference/components/sinks/base/aws_sqs.cue
+++ b/website/cue/reference/components/sinks/base/aws_sqs.cue
@@ -139,6 +139,11 @@ base: components: sinks: aws_sqs: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	encoding: {
diff --git a/website/cue/reference/components/sinks/base/elasticsearch.cue b/website/cue/reference/components/sinks/base/elasticsearch.cue
index c2340f11a1340..be8d231c3e940 100644
--- a/website/cue/reference/components/sinks/base/elasticsearch.cue
+++ b/website/cue/reference/components/sinks/base/elasticsearch.cue
@@ -182,6 +182,12 @@ base: components: sinks: elasticsearch: configuration: {
 				required:      false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description:   "The AWS session token."
+				relevant_when: "strategy = \"aws\""
+				required:      false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 			strategy: {
 				description: """
 					The authentication strategy to use.
diff --git a/website/cue/reference/components/sinks/base/prometheus_remote_write.cue b/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
index 4ca726cbd445b..173e025040a3a 100644
--- a/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
+++ b/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
@@ -155,6 +155,12 @@ base: components: sinks: prometheus_remote_write: configuration: {
 				required:      false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description:   "The AWS session token."
+				relevant_when: "strategy = \"aws\""
+				required:      false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 			strategy: {
 				description: "The authentication strategy to use."
 				required:    true
diff --git a/website/cue/reference/components/sources/base/aws_s3.cue b/website/cue/reference/components/sources/base/aws_s3.cue
index 8b3da586e11e8..6defd6e340d0a 100644
--- a/website/cue/reference/components/sources/base/aws_s3.cue
+++ b/website/cue/reference/components/sources/base/aws_s3.cue
@@ -134,6 +134,11 @@ base: components: sources: aws_s3: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	compression: {
diff --git a/website/cue/reference/components/sources/base/aws_sqs.cue b/website/cue/reference/components/sources/base/aws_sqs.cue
index 9c713b33b2bd4..67fa2af165077 100644
--- a/website/cue/reference/components/sources/base/aws_sqs.cue
+++ b/website/cue/reference/components/sources/base/aws_sqs.cue
@@ -134,6 +134,11 @@ base: components: sources: aws_sqs: configuration: {
 				required: false
 				type: string: examples: ["vector-indexer-role"]
 			}
+			session_token: {
+				description: "The AWS session token."
+				required:    false
+				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+			}
 		}
 	}
 	client_concurrency: {

From 544e3e583151fa5dde78825eae45c1bd26047558 Mon Sep 17 00:00:00 2001
From: Anil Gupta <90670783+anil-db@users.noreply.github.com>
Date: Wed, 30 Apr 2025 15:59:46 -0700
Subject: [PATCH 2/6] doc generation

---
 website/cue/reference/components/sinks/base/clickhouse.cue   | 5 +++++
 website/cue/reference/components/sinks/base/databend.cue     | 5 +++++
 website/cue/reference/components/sinks/base/http.cue         | 5 +++++
 website/cue/reference/components/sinks/base/loki.cue         | 5 +++++
 .../cue/reference/components/sinks/base/opentelemetry.cue    | 5 +++++
 .../reference/components/sinks/base/prometheus_exporter.cue  | 5 +++++
 website/cue/reference/components/sinks/base/websocket.cue    | 5 +++++
 .../cue/reference/components/sources/base/http_client.cue    | 5 +++++
 .../cue/reference/components/sources/base/nginx_metrics.cue  | 5 +++++
 .../reference/components/sources/base/prometheus_scrape.cue  | 5 +++++
 10 files changed, 50 insertions(+)

diff --git a/website/cue/reference/components/sinks/base/clickhouse.cue b/website/cue/reference/components/sinks/base/clickhouse.cue
index e93b7e417bf07..a2519b6cfd72d 100644
--- a/website/cue/reference/components/sinks/base/clickhouse.cue
+++ b/website/cue/reference/components/sinks/base/clickhouse.cue
@@ -149,6 +149,11 @@ base: components: sinks: clickhouse: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sinks/base/databend.cue b/website/cue/reference/components/sinks/base/databend.cue
index 54033a7968da8..75ac11f32ed3a 100644
--- a/website/cue/reference/components/sinks/base/databend.cue
+++ b/website/cue/reference/components/sinks/base/databend.cue
@@ -144,6 +144,11 @@ base: components: sinks: databend: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sinks/base/http.cue b/website/cue/reference/components/sinks/base/http.cue
index 402db85cfc8da..b4c73708449fa 100644
--- a/website/cue/reference/components/sinks/base/http.cue
+++ b/website/cue/reference/components/sinks/base/http.cue
@@ -149,6 +149,11 @@ base: components: sinks: http: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sinks/base/loki.cue b/website/cue/reference/components/sinks/base/loki.cue
index e846d91dfb300..bdca5ec98bc26 100644
--- a/website/cue/reference/components/sinks/base/loki.cue
+++ b/website/cue/reference/components/sinks/base/loki.cue
@@ -149,6 +149,11 @@ base: components: sinks: loki: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sinks/base/opentelemetry.cue b/website/cue/reference/components/sinks/base/opentelemetry.cue
index de87314957157..d7674b55f3508 100644
--- a/website/cue/reference/components/sinks/base/opentelemetry.cue
+++ b/website/cue/reference/components/sinks/base/opentelemetry.cue
@@ -152,6 +152,11 @@ base: components: sinks: opentelemetry: configuration: protocol: {
 							required: false
 							type: string: examples: ["vector-indexer-role"]
 						}
+						session_token: {
+							description: "The AWS session token."
+							required:    false
+							type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+						}
 					}
 				}
 				password: {
diff --git a/website/cue/reference/components/sinks/base/prometheus_exporter.cue b/website/cue/reference/components/sinks/base/prometheus_exporter.cue
index 23b073699ba7b..513d41aea1e2a 100644
--- a/website/cue/reference/components/sinks/base/prometheus_exporter.cue
+++ b/website/cue/reference/components/sinks/base/prometheus_exporter.cue
@@ -161,6 +161,11 @@ base: components: sinks: prometheus_exporter: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sinks/base/websocket.cue b/website/cue/reference/components/sinks/base/websocket.cue
index 301315bbf9ea1..d8f7e753eb9bf 100644
--- a/website/cue/reference/components/sinks/base/websocket.cue
+++ b/website/cue/reference/components/sinks/base/websocket.cue
@@ -149,6 +149,11 @@ base: components: sinks: websocket: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sources/base/http_client.cue b/website/cue/reference/components/sources/base/http_client.cue
index 5718041692c20..0cc8b1daabf3b 100644
--- a/website/cue/reference/components/sources/base/http_client.cue
+++ b/website/cue/reference/components/sources/base/http_client.cue
@@ -118,6 +118,11 @@ base: components: sources: http_client: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sources/base/nginx_metrics.cue b/website/cue/reference/components/sources/base/nginx_metrics.cue
index 57fb2200f7234..01fffa8198571 100644
--- a/website/cue/reference/components/sources/base/nginx_metrics.cue
+++ b/website/cue/reference/components/sources/base/nginx_metrics.cue
@@ -123,6 +123,11 @@ base: components: sources: nginx_metrics: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {
diff --git a/website/cue/reference/components/sources/base/prometheus_scrape.cue b/website/cue/reference/components/sources/base/prometheus_scrape.cue
index 396aa751a7ee9..dedc6828f9da6 100644
--- a/website/cue/reference/components/sources/base/prometheus_scrape.cue
+++ b/website/cue/reference/components/sources/base/prometheus_scrape.cue
@@ -123,6 +123,11 @@ base: components: sources: prometheus_scrape: configuration: {
 						required: false
 						type: string: examples: ["vector-indexer-role"]
 					}
+					session_token: {
+						description: "The AWS session token."
+						required:    false
+						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
+					}
 				}
 			}
 			password: {

From 3edb17c2806791ce5103d8f22872b02acfb4be97 Mon Sep 17 00:00:00 2001
From: Anil Gupta <90670783+anil-db@users.noreply.github.com>
Date: Mon, 12 May 2025 08:45:53 -0700
Subject: [PATCH 3/6] Update changelog.d/aws-auth-session-token.enhancement.md

Co-authored-by: Pavlos Rontidis <pavlos.rontidis@gmail.com>
---
 changelog.d/aws-auth-session-token.enhancement.md | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/changelog.d/aws-auth-session-token.enhancement.md b/changelog.d/aws-auth-session-token.enhancement.md
index ddd5e055cfaa3..5d49320932445 100644
--- a/changelog.d/aws-auth-session-token.enhancement.md
+++ b/changelog.d/aws-auth-session-token.enhancement.md
@@ -1,5 +1,3 @@
-Adds session token support to the aws auth options. Session token is required with access id and secret keys when using temporary credentials.
-If temporary credentials is created and supplied by another external system.
-Update to these temporary credentials can be done by external system using `SECRET` backend.
+Adds support for session tokens in AWS authentication options. When using temporary credentials (access key, secret key, and session token), the session token is required. Temporary credentials can be provided by an external system and updated using the `SECRET` backend.
 
 authors: anil-db

From 5102544287d0b298573b4c1ce17228e0efc46aa2 Mon Sep 17 00:00:00 2001
From: Anil Gupta <90670783+anil-db@users.noreply.github.com>
Date: Mon, 12 May 2025 08:55:14 -0700
Subject: [PATCH 4/6] incorporate comments

---
 src/aws/auth.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/aws/auth.rs b/src/aws/auth.rs
index 7d31dd30ed591..7e3ac7bf7855b 100644
--- a/src/aws/auth.rs
+++ b/src/aws/auth.rs
@@ -72,6 +72,7 @@ pub enum AwsAuthentication {
         secret_access_key: SensitiveString,
 
         /// The AWS session token.
+        /// See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
         #[configurable(metadata(docs::examples = "AQoDYXdz...AQoDYXdz..."))]
         session_token: Option<SensitiveString>,
 

From bce241d531068305119613c0174aae15a90156f5 Mon Sep 17 00:00:00 2001
From: Anil Gupta <90670783+anil-db@users.noreply.github.com>
Date: Tue, 13 May 2025 16:52:04 -0700
Subject: [PATCH 5/6] rerun make generate-component-docs

---
 website/cue/reference/base/configuration.cue               | 7 +++++--
 .../components/sinks/base/aws_cloudwatch_logs.cue          | 7 +++++--
 .../components/sinks/base/aws_cloudwatch_metrics.cue       | 7 +++++--
 .../components/sinks/base/aws_kinesis_firehose.cue         | 7 +++++--
 .../components/sinks/base/aws_kinesis_streams.cue          | 7 +++++--
 website/cue/reference/components/sinks/base/aws_s3.cue     | 7 +++++--
 website/cue/reference/components/sinks/base/aws_sns.cue    | 7 +++++--
 website/cue/reference/components/sinks/base/aws_sqs.cue    | 7 +++++--
 website/cue/reference/components/sinks/base/clickhouse.cue | 7 +++++--
 website/cue/reference/components/sinks/base/databend.cue   | 7 +++++--
 .../cue/reference/components/sinks/base/elasticsearch.cue  | 5 ++++-
 website/cue/reference/components/sinks/base/http.cue       | 7 +++++--
 website/cue/reference/components/sinks/base/loki.cue       | 7 +++++--
 .../cue/reference/components/sinks/base/opentelemetry.cue  | 7 +++++--
 .../components/sinks/base/prometheus_exporter.cue          | 7 +++++--
 .../components/sinks/base/prometheus_remote_write.cue      | 5 ++++-
 website/cue/reference/components/sinks/base/websocket.cue  | 7 +++++--
 website/cue/reference/components/sources/base/aws_s3.cue   | 7 +++++--
 website/cue/reference/components/sources/base/aws_sqs.cue  | 7 +++++--
 .../cue/reference/components/sources/base/http_client.cue  | 7 +++++--
 .../reference/components/sources/base/nginx_metrics.cue    | 7 +++++--
 .../components/sources/base/prometheus_scrape.cue          | 7 +++++--
 22 files changed, 108 insertions(+), 42 deletions(-)

diff --git a/website/cue/reference/base/configuration.cue b/website/cue/reference/base/configuration.cue
index e634712024d30..5316e9d0fa3fa 100644
--- a/website/cue/reference/base/configuration.cue
+++ b/website/cue/reference/base/configuration.cue
@@ -366,8 +366,11 @@ base: configuration: configuration: {
 					}
 					session_token: {
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
-						description: "The AWS session token."
-						required:    false
+						description: """
+														The AWS session token.
+														See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+														"""
+						required: false
 					}
 					credentials_file: {
 						type: string: examples: ["/my/aws/credentials"]
diff --git a/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue b/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
index 15bde98f7359a..bc50fd3662f10 100644
--- a/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
+++ b/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
@@ -140,8 +140,11 @@ base: components: sinks: aws_cloudwatch_logs: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue b/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
index ac8b1736ad4e5..73f2f9ec5a956 100644
--- a/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
+++ b/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
@@ -140,8 +140,11 @@ base: components: sinks: aws_cloudwatch_metrics: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue b/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
index 8c00e97c2ada7..49b242921bec1 100644
--- a/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
+++ b/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
@@ -140,8 +140,11 @@ base: components: sinks: aws_kinesis_firehose: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue b/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
index 03290dca27afd..bfed81cb77ab5 100644
--- a/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
+++ b/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
@@ -140,8 +140,11 @@ base: components: sinks: aws_kinesis_streams: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sinks/base/aws_s3.cue b/website/cue/reference/components/sinks/base/aws_s3.cue
index d9a8a868d9cdf..101100def672f 100644
--- a/website/cue/reference/components/sinks/base/aws_s3.cue
+++ b/website/cue/reference/components/sinks/base/aws_s3.cue
@@ -215,8 +215,11 @@ base: components: sinks: aws_s3: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sinks/base/aws_sns.cue b/website/cue/reference/components/sinks/base/aws_sns.cue
index 444cd5e35e6e1..d78c58f7d7c82 100644
--- a/website/cue/reference/components/sinks/base/aws_sns.cue
+++ b/website/cue/reference/components/sinks/base/aws_sns.cue
@@ -140,8 +140,11 @@ base: components: sinks: aws_sns: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sinks/base/aws_sqs.cue b/website/cue/reference/components/sinks/base/aws_sqs.cue
index cb9ebc580996e..7accf5bb5a88e 100644
--- a/website/cue/reference/components/sinks/base/aws_sqs.cue
+++ b/website/cue/reference/components/sinks/base/aws_sqs.cue
@@ -140,8 +140,11 @@ base: components: sinks: aws_sqs: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sinks/base/clickhouse.cue b/website/cue/reference/components/sinks/base/clickhouse.cue
index a2519b6cfd72d..9b55ac7431ce8 100644
--- a/website/cue/reference/components/sinks/base/clickhouse.cue
+++ b/website/cue/reference/components/sinks/base/clickhouse.cue
@@ -150,8 +150,11 @@ base: components: sinks: clickhouse: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sinks/base/databend.cue b/website/cue/reference/components/sinks/base/databend.cue
index 75ac11f32ed3a..73820d43442f3 100644
--- a/website/cue/reference/components/sinks/base/databend.cue
+++ b/website/cue/reference/components/sinks/base/databend.cue
@@ -145,8 +145,11 @@ base: components: sinks: databend: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sinks/base/elasticsearch.cue b/website/cue/reference/components/sinks/base/elasticsearch.cue
index be8d231c3e940..aa37d9c8c78d4 100644
--- a/website/cue/reference/components/sinks/base/elasticsearch.cue
+++ b/website/cue/reference/components/sinks/base/elasticsearch.cue
@@ -183,7 +183,10 @@ base: components: sinks: elasticsearch: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description:   "The AWS session token."
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
 				relevant_when: "strategy = \"aws\""
 				required:      false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/http.cue b/website/cue/reference/components/sinks/base/http.cue
index b4c73708449fa..ef9d13440c4c2 100644
--- a/website/cue/reference/components/sinks/base/http.cue
+++ b/website/cue/reference/components/sinks/base/http.cue
@@ -150,8 +150,11 @@ base: components: sinks: http: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sinks/base/loki.cue b/website/cue/reference/components/sinks/base/loki.cue
index bdca5ec98bc26..fc36d18df24ad 100644
--- a/website/cue/reference/components/sinks/base/loki.cue
+++ b/website/cue/reference/components/sinks/base/loki.cue
@@ -150,8 +150,11 @@ base: components: sinks: loki: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sinks/base/opentelemetry.cue b/website/cue/reference/components/sinks/base/opentelemetry.cue
index d7674b55f3508..e4ebe5e856589 100644
--- a/website/cue/reference/components/sinks/base/opentelemetry.cue
+++ b/website/cue/reference/components/sinks/base/opentelemetry.cue
@@ -153,8 +153,11 @@ base: components: sinks: opentelemetry: configuration: protocol: {
 							type: string: examples: ["vector-indexer-role"]
 						}
 						session_token: {
-							description: "The AWS session token."
-							required:    false
+							description: """
+																				The AWS session token.
+																				See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																				"""
+							required: false
 							type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 						}
 					}
diff --git a/website/cue/reference/components/sinks/base/prometheus_exporter.cue b/website/cue/reference/components/sinks/base/prometheus_exporter.cue
index 513d41aea1e2a..c400fd7a4ce69 100644
--- a/website/cue/reference/components/sinks/base/prometheus_exporter.cue
+++ b/website/cue/reference/components/sinks/base/prometheus_exporter.cue
@@ -162,8 +162,11 @@ base: components: sinks: prometheus_exporter: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sinks/base/prometheus_remote_write.cue b/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
index 173e025040a3a..ebdb8aa80b395 100644
--- a/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
+++ b/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
@@ -156,7 +156,10 @@ base: components: sinks: prometheus_remote_write: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description:   "The AWS session token."
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
 				relevant_when: "strategy = \"aws\""
 				required:      false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/websocket.cue b/website/cue/reference/components/sinks/base/websocket.cue
index d8f7e753eb9bf..f7f0ddd295252 100644
--- a/website/cue/reference/components/sinks/base/websocket.cue
+++ b/website/cue/reference/components/sinks/base/websocket.cue
@@ -150,8 +150,11 @@ base: components: sinks: websocket: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sources/base/aws_s3.cue b/website/cue/reference/components/sources/base/aws_s3.cue
index 6defd6e340d0a..9f27a58181f49 100644
--- a/website/cue/reference/components/sources/base/aws_s3.cue
+++ b/website/cue/reference/components/sources/base/aws_s3.cue
@@ -135,8 +135,11 @@ base: components: sources: aws_s3: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sources/base/aws_sqs.cue b/website/cue/reference/components/sources/base/aws_sqs.cue
index 67fa2af165077..caea2a814e180 100644
--- a/website/cue/reference/components/sources/base/aws_sqs.cue
+++ b/website/cue/reference/components/sources/base/aws_sqs.cue
@@ -135,8 +135,11 @@ base: components: sources: aws_sqs: configuration: {
 				type: string: examples: ["vector-indexer-role"]
 			}
 			session_token: {
-				description: "The AWS session token."
-				required:    false
+				description: """
+					The AWS session token.
+					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					"""
+				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 			}
 		}
diff --git a/website/cue/reference/components/sources/base/http_client.cue b/website/cue/reference/components/sources/base/http_client.cue
index 0cc8b1daabf3b..3bbfca81fa526 100644
--- a/website/cue/reference/components/sources/base/http_client.cue
+++ b/website/cue/reference/components/sources/base/http_client.cue
@@ -119,8 +119,11 @@ base: components: sources: http_client: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sources/base/nginx_metrics.cue b/website/cue/reference/components/sources/base/nginx_metrics.cue
index 01fffa8198571..722dfc0051ca4 100644
--- a/website/cue/reference/components/sources/base/nginx_metrics.cue
+++ b/website/cue/reference/components/sources/base/nginx_metrics.cue
@@ -124,8 +124,11 @@ base: components: sources: nginx_metrics: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}
diff --git a/website/cue/reference/components/sources/base/prometheus_scrape.cue b/website/cue/reference/components/sources/base/prometheus_scrape.cue
index dedc6828f9da6..d7282f775ff35 100644
--- a/website/cue/reference/components/sources/base/prometheus_scrape.cue
+++ b/website/cue/reference/components/sources/base/prometheus_scrape.cue
@@ -124,8 +124,11 @@ base: components: sources: prometheus_scrape: configuration: {
 						type: string: examples: ["vector-indexer-role"]
 					}
 					session_token: {
-						description: "The AWS session token."
-						required:    false
+						description: """
+																The AWS session token.
+																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																"""
+						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 					}
 				}

From 6c2ef2ead933603086b11b9b2498ea6688864474 Mon Sep 17 00:00:00 2001
From: Anil Gupta <90670783+anil-db@users.noreply.github.com>
Date: Thu, 29 May 2025 10:12:49 -0700
Subject: [PATCH 6/6] fix bare url in doc

---
 src/aws/auth.rs                                                 | 2 +-
 website/cue/reference/base/configuration.cue                    | 2 +-
 .../cue/reference/components/sinks/base/aws_cloudwatch_logs.cue | 2 +-
 .../reference/components/sinks/base/aws_cloudwatch_metrics.cue  | 2 +-
 .../reference/components/sinks/base/aws_kinesis_firehose.cue    | 2 +-
 .../cue/reference/components/sinks/base/aws_kinesis_streams.cue | 2 +-
 website/cue/reference/components/sinks/base/aws_s3.cue          | 2 +-
 website/cue/reference/components/sinks/base/aws_sns.cue         | 2 +-
 website/cue/reference/components/sinks/base/aws_sqs.cue         | 2 +-
 website/cue/reference/components/sinks/base/clickhouse.cue      | 2 +-
 website/cue/reference/components/sinks/base/databend.cue        | 2 +-
 website/cue/reference/components/sinks/base/elasticsearch.cue   | 2 +-
 website/cue/reference/components/sinks/base/http.cue            | 2 +-
 website/cue/reference/components/sinks/base/loki.cue            | 2 +-
 website/cue/reference/components/sinks/base/opentelemetry.cue   | 2 +-
 .../cue/reference/components/sinks/base/prometheus_exporter.cue | 2 +-
 .../reference/components/sinks/base/prometheus_remote_write.cue | 2 +-
 website/cue/reference/components/sinks/base/websocket.cue       | 2 +-
 website/cue/reference/components/sources/base/aws_s3.cue        | 2 +-
 website/cue/reference/components/sources/base/aws_sqs.cue       | 2 +-
 website/cue/reference/components/sources/base/http_client.cue   | 2 +-
 website/cue/reference/components/sources/base/nginx_metrics.cue | 2 +-
 .../cue/reference/components/sources/base/prometheus_scrape.cue | 2 +-
 23 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/src/aws/auth.rs b/src/aws/auth.rs
index 7e3ac7bf7855b..4dd00f5cdbc24 100644
--- a/src/aws/auth.rs
+++ b/src/aws/auth.rs
@@ -72,7 +72,7 @@ pub enum AwsAuthentication {
         secret_access_key: SensitiveString,
 
         /// The AWS session token.
-        /// See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+        /// See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
         #[configurable(metadata(docs::examples = "AQoDYXdz...AQoDYXdz..."))]
         session_token: Option<SensitiveString>,
 
diff --git a/website/cue/reference/base/configuration.cue b/website/cue/reference/base/configuration.cue
index 5316e9d0fa3fa..ae4998cc0078b 100644
--- a/website/cue/reference/base/configuration.cue
+++ b/website/cue/reference/base/configuration.cue
@@ -368,7 +368,7 @@ base: configuration: configuration: {
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
 						description: """
 														The AWS session token.
-														See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+														See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 														"""
 						required: false
 					}
diff --git a/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue b/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
index bc50fd3662f10..4b4bdc8682ebb 100644
--- a/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
+++ b/website/cue/reference/components/sinks/base/aws_cloudwatch_logs.cue
@@ -142,7 +142,7 @@ base: components: sinks: aws_cloudwatch_logs: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue b/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
index 73f2f9ec5a956..f766635907dd8 100644
--- a/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
+++ b/website/cue/reference/components/sinks/base/aws_cloudwatch_metrics.cue
@@ -142,7 +142,7 @@ base: components: sinks: aws_cloudwatch_metrics: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue b/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
index 49b242921bec1..889738a70b18d 100644
--- a/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
+++ b/website/cue/reference/components/sinks/base/aws_kinesis_firehose.cue
@@ -142,7 +142,7 @@ base: components: sinks: aws_kinesis_firehose: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue b/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
index bfed81cb77ab5..21fb8838e725e 100644
--- a/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
+++ b/website/cue/reference/components/sinks/base/aws_kinesis_streams.cue
@@ -142,7 +142,7 @@ base: components: sinks: aws_kinesis_streams: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/aws_s3.cue b/website/cue/reference/components/sinks/base/aws_s3.cue
index 101100def672f..a79cecf594b2d 100644
--- a/website/cue/reference/components/sinks/base/aws_s3.cue
+++ b/website/cue/reference/components/sinks/base/aws_s3.cue
@@ -217,7 +217,7 @@ base: components: sinks: aws_s3: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/aws_sns.cue b/website/cue/reference/components/sinks/base/aws_sns.cue
index d78c58f7d7c82..8d183c33d9b04 100644
--- a/website/cue/reference/components/sinks/base/aws_sns.cue
+++ b/website/cue/reference/components/sinks/base/aws_sns.cue
@@ -142,7 +142,7 @@ base: components: sinks: aws_sns: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/aws_sqs.cue b/website/cue/reference/components/sinks/base/aws_sqs.cue
index 7accf5bb5a88e..0493d2ede171f 100644
--- a/website/cue/reference/components/sinks/base/aws_sqs.cue
+++ b/website/cue/reference/components/sinks/base/aws_sqs.cue
@@ -142,7 +142,7 @@ base: components: sinks: aws_sqs: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/clickhouse.cue b/website/cue/reference/components/sinks/base/clickhouse.cue
index 9b55ac7431ce8..91a979158b87b 100644
--- a/website/cue/reference/components/sinks/base/clickhouse.cue
+++ b/website/cue/reference/components/sinks/base/clickhouse.cue
@@ -152,7 +152,7 @@ base: components: sinks: clickhouse: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/databend.cue b/website/cue/reference/components/sinks/base/databend.cue
index 73820d43442f3..2023fdb8ba7d2 100644
--- a/website/cue/reference/components/sinks/base/databend.cue
+++ b/website/cue/reference/components/sinks/base/databend.cue
@@ -147,7 +147,7 @@ base: components: sinks: databend: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/elasticsearch.cue b/website/cue/reference/components/sinks/base/elasticsearch.cue
index aa37d9c8c78d4..03f5e686e0a30 100644
--- a/website/cue/reference/components/sinks/base/elasticsearch.cue
+++ b/website/cue/reference/components/sinks/base/elasticsearch.cue
@@ -185,7 +185,7 @@ base: components: sinks: elasticsearch: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				relevant_when: "strategy = \"aws\""
 				required:      false
diff --git a/website/cue/reference/components/sinks/base/http.cue b/website/cue/reference/components/sinks/base/http.cue
index ef9d13440c4c2..006f535cd6cb9 100644
--- a/website/cue/reference/components/sinks/base/http.cue
+++ b/website/cue/reference/components/sinks/base/http.cue
@@ -152,7 +152,7 @@ base: components: sinks: http: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/loki.cue b/website/cue/reference/components/sinks/base/loki.cue
index fc36d18df24ad..9dfb3e6b51500 100644
--- a/website/cue/reference/components/sinks/base/loki.cue
+++ b/website/cue/reference/components/sinks/base/loki.cue
@@ -152,7 +152,7 @@ base: components: sinks: loki: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/opentelemetry.cue b/website/cue/reference/components/sinks/base/opentelemetry.cue
index e4ebe5e856589..fcb438b6c835b 100644
--- a/website/cue/reference/components/sinks/base/opentelemetry.cue
+++ b/website/cue/reference/components/sinks/base/opentelemetry.cue
@@ -155,7 +155,7 @@ base: components: sinks: opentelemetry: configuration: protocol: {
 						session_token: {
 							description: """
 																				The AWS session token.
-																				See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																				See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																				"""
 							required: false
 							type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/prometheus_exporter.cue b/website/cue/reference/components/sinks/base/prometheus_exporter.cue
index c400fd7a4ce69..50f16c511e1a9 100644
--- a/website/cue/reference/components/sinks/base/prometheus_exporter.cue
+++ b/website/cue/reference/components/sinks/base/prometheus_exporter.cue
@@ -164,7 +164,7 @@ base: components: sinks: prometheus_exporter: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sinks/base/prometheus_remote_write.cue b/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
index ebdb8aa80b395..519e55e0c32d8 100644
--- a/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
+++ b/website/cue/reference/components/sinks/base/prometheus_remote_write.cue
@@ -158,7 +158,7 @@ base: components: sinks: prometheus_remote_write: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				relevant_when: "strategy = \"aws\""
 				required:      false
diff --git a/website/cue/reference/components/sinks/base/websocket.cue b/website/cue/reference/components/sinks/base/websocket.cue
index f7f0ddd295252..d6cadf59f1fbc 100644
--- a/website/cue/reference/components/sinks/base/websocket.cue
+++ b/website/cue/reference/components/sinks/base/websocket.cue
@@ -152,7 +152,7 @@ base: components: sinks: websocket: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sources/base/aws_s3.cue b/website/cue/reference/components/sources/base/aws_s3.cue
index 9f27a58181f49..e49d52b08c818 100644
--- a/website/cue/reference/components/sources/base/aws_s3.cue
+++ b/website/cue/reference/components/sources/base/aws_s3.cue
@@ -137,7 +137,7 @@ base: components: sources: aws_s3: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sources/base/aws_sqs.cue b/website/cue/reference/components/sources/base/aws_sqs.cue
index caea2a814e180..bc717121c5f09 100644
--- a/website/cue/reference/components/sources/base/aws_sqs.cue
+++ b/website/cue/reference/components/sources/base/aws_sqs.cue
@@ -137,7 +137,7 @@ base: components: sources: aws_sqs: configuration: {
 			session_token: {
 				description: """
 					The AWS session token.
-					See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+					See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 					"""
 				required: false
 				type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sources/base/http_client.cue b/website/cue/reference/components/sources/base/http_client.cue
index 3bbfca81fa526..290740a94ac1a 100644
--- a/website/cue/reference/components/sources/base/http_client.cue
+++ b/website/cue/reference/components/sources/base/http_client.cue
@@ -121,7 +121,7 @@ base: components: sources: http_client: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sources/base/nginx_metrics.cue b/website/cue/reference/components/sources/base/nginx_metrics.cue
index 722dfc0051ca4..12cb35c733faf 100644
--- a/website/cue/reference/components/sources/base/nginx_metrics.cue
+++ b/website/cue/reference/components/sources/base/nginx_metrics.cue
@@ -126,7 +126,7 @@ base: components: sources: nginx_metrics: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]
diff --git a/website/cue/reference/components/sources/base/prometheus_scrape.cue b/website/cue/reference/components/sources/base/prometheus_scrape.cue
index d7282f775ff35..ecaff2a727185 100644
--- a/website/cue/reference/components/sources/base/prometheus_scrape.cue
+++ b/website/cue/reference/components/sources/base/prometheus_scrape.cue
@@ -126,7 +126,7 @@ base: components: sources: prometheus_scrape: configuration: {
 					session_token: {
 						description: """
 																The AWS session token.
-																See https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html
+																See [AWS temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
 																"""
 						required: false
 						type: string: examples: ["AQoDYXdz...AQoDYXdz..."]