diff --git a/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts b/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts
index 3aadc6b4a..3bbe88824 100644
--- a/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts
+++ b/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts
@@ -162,7 +162,9 @@ export const identityAwsAuthServiceFactory = ({
         });
 
       if (!isArnAllowed) {
-        logger.info({ formattedArn, rawArn: Arn }, "Access denied: AWS principal ARN not allowed");
+        logger.error(
+          `AWS Auth Login: AWS principal ARN not allowed [principal-arn=${formattedArn}] [raw-arn=${Arn}] [identity-id=${identity.id}]`
+        );
 
         throw new UnauthorizedError({
           message: `Access denied: AWS principal ARN not allowed. [principal-arn=${formattedArn}]`