diff --git a/src/main/python/ddadevops/domain/provider_aws.py b/src/main/python/ddadevops/domain/provider_aws.py
index 870cd79..2123703 100644
--- a/src/main/python/ddadevops/domain/provider_aws.py
+++ b/src/main/python/ddadevops/domain/provider_aws.py
@@ -36,6 +36,8 @@ class Aws(Validateable, CredentialMappingDefault):
         result = {}
         if self.aws_as_backend:
             result = {
+                "access_key": self.aws_access_key,
+                "secret_key": self.aws_secret_key,
                 "bucket": self.aws_bucket,
                 "key": self.__bucket_key__(),
                 "region": self.aws_region,
diff --git a/src/test/python/domain/test_provider_aws.py b/src/test/python/domain/test_provider_aws.py
index 8287ef4..e044e7e 100644
--- a/src/test/python/domain/test_provider_aws.py
+++ b/src/test/python/domain/test_provider_aws.py
@@ -41,6 +41,8 @@ def test_should_calculate_backend_config():
             {
                 "module": "dns_aws",
                 "stage": "prod",
+                "aws_access_key": "aws_access_key",
+                "aws_secret_key": "aws_secret_key", 
                 "aws_bucket": "meissa-configuration",
                 "aws_bucket_kms_key_id": "arn:aws:kms:eu-central-1:907507348333:alias/meissa-configuration",
                 "aws_region": "eu-central-1",
@@ -48,6 +50,8 @@ def test_should_calculate_backend_config():
         )
     )
     assert {
+        "access_key": "aws_access_key",
+        "secret_key": "aws_secret_key",
         "bucket": "meissa-configuration",
         "key": "prod/dns_aws",
         "kms_key_id": "arn:aws:kms:eu-central-1:907507348333:alias/meissa-configuration",