From 02ba35a51eb90868cc29a9e13b72f054f6870f7a Mon Sep 17 00:00:00 2001
From: Daniel Hougaard <daniel@infisical.com>
Date: Thu, 23 Oct 2025 15:10:15 +0400
Subject: [PATCH] Update identity-aws-auth-service.ts

---
 .../services/identity-aws-auth/identity-aws-auth-service.ts   | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts b/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts
index 3aadc6b4a..3bbe88824 100644
--- a/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts
+++ b/backend/src/services/identity-aws-auth/identity-aws-auth-service.ts
@@ -162,7 +162,9 @@ export const identityAwsAuthServiceFactory = ({
         });
 
       if (!isArnAllowed) {
-        logger.info({ formattedArn, rawArn: Arn }, "Access denied: AWS principal ARN not allowed");
+        logger.error(
+          `AWS Auth Login: AWS principal ARN not allowed [principal-arn=${formattedArn}] [raw-arn=${Arn}] [identity-id=${identity.id}]`
+        );
 
         throw new UnauthorizedError({
           message: `Access denied: AWS principal ARN not allowed. [principal-arn=${formattedArn}]`