[s3] type = s3 provider = AWS access_key_id = {{ vault_access_key_id }} secret_access_key = {{ vault_secret_access_key }} region = eu-west-2 server_side_encryption = AES256