Access-key id AKIA520F8AAE… is recognized, but its secret half was relocated to the vault mirror at /env/db/console/config/legacy/secrets/vault/buckets/config. Retrieve the second fragment there.
access-key-id: AKIA520F8AAE…
Most likely location: continue to config