diff --git a/backend/src/server/routes/v1/integration-router.ts b/backend/src/server/routes/v1/integration-router.ts
index 54e876783..f908aa1fc 100644
--- a/backend/src/server/routes/v1/integration-router.ts
+++ b/backend/src/server/routes/v1/integration-router.ts
@@ -68,7 +68,7 @@ export const registerIntegrationRouter = async (server: FastifyZodProvider) => {
               .describe(INTEGRATION.CREATE.metadata.secretAWSTag),
             kmsKeyId: z.string().optional().describe(INTEGRATION.CREATE.metadata.kmsKeyId)
           })
-          .optional()
+          .default({})
       }),
       response: {
         200: z.object({
diff --git a/docs/integrations/cloud/aws-secret-manager.mdx b/docs/integrations/cloud/aws-secret-manager.mdx
index 3ecf7771e..2ab45c620 100644
--- a/docs/integrations/cloud/aws-secret-manager.mdx
+++ b/docs/integrations/cloud/aws-secret-manager.mdx
@@ -30,13 +30,15 @@ Prerequisites:
             "secretsmanager:CreateSecret",
             "secretsmanager:UpdateSecret",
             "secretsmanager:TagResource", // if you need to add tags to secrets
-            "kms:ListKeys" // if you need to specify the KMS key
+            "kms:ListKeys", // if you need to specify the KMS key
+            "kms:ListAliases" // if you need to specify the KMS key
           ],
           "Resource": "*"
         }
       ]
     }
     ```
+
   </Step>
   <Step title="Authorize Infisical for AWS Secrets Manager">
     Obtain a AWS access key ID and secret access key for your IAM user in IAM > Users > User > Security credentials > Access keys
@@ -44,7 +46,7 @@ Prerequisites:
     ![access key 1](../../images/integrations/aws/integrations-aws-access-key-1.png)
     ![access key 2](../../images/integrations/aws/integrations-aws-access-key-2.png)
     ![access key 3](../../images/integrations/aws/integrations-aws-access-key-3.png)
-    
+
     Navigate to your project's integrations tab in Infisical.
 
     ![integrations](../../images/integrations.png)
@@ -52,6 +54,7 @@ Prerequisites:
     Press on the AWS Secrets Manager tile and input your AWS access key ID and secret access key from the previous step.
 
     ![integration auth](../../images/integrations/aws/integrations-aws-secret-manager-auth.png)
+
   </Step>
   <Step title="Start integration">
     Select how you want to integration to work by specifying a number of parameters:
@@ -66,7 +69,7 @@ Prerequisites:
       The region that you want to integrate with in AWS Secrets Manager.
     </ParamField>
     <ParamField path="AWS SM Secret Name" type="string" required>
-      The secret name/path in AWS into which you want to sync the secrets from Infisical. 
+      The secret name/path in AWS into which you want to sync the secrets from Infisical.
     </ParamField>
 
     ![integration create](../../images/integrations/aws/integrations-aws-secret-manager-create.png)
@@ -77,7 +80,7 @@ Prerequisites:
       The Key/Value of a tag that will be added to secrets in AWS. Please note that it is possible to add multiple tags via API.
     </ParamField>
     <ParamField path="Encryption Key" type="string" optional>
-      The alias/ID of the AWS KMS key used for encryption. Please note that keys should be enabled in order to work.
+      The alias/ID of the AWS KMS key used for encryption. Please note that key should be enabled in order to work and the IAM user should have access to it.
     </ParamField>
     ![integration options](../../images/integrations/aws/integrations-aws-secret-manager-options.png)
 
@@ -92,5 +95,6 @@ Prerequisites:
     <Info>
       Please note that upon deleting secrets in Infisical, AWS Secrets Manager immediately makes the secrets inaccessible but only schedules them for deletion after at least 7 days.
     </Info>
+
   </Step>
 </Steps>