Access-key id AKIA4E7946FC… is recognized, but its secret half was relocated to the vault mirror at /legacy/prod/admin.bak/vault/buckets/keys/deploy/config/credentials/env. Retrieve the second fragment there.
access-key-id: AKIA4E7946FC…
Most likely location: continue to env