diff --git a/clusters/hosted_control_planes/create_role_sts_aws.adoc b/clusters/hosted_control_planes/create_role_sts_aws.adoc
index ba92f39d66..927f5ef623 100644
--- a/clusters/hosted_control_planes/create_role_sts_aws.adoc
+++ b/clusters/hosted_control_planes/create_role_sts_aws.adoc
@@ -34,7 +34,7 @@ You need the `arn` value from the output to use in the next step.
         {
             "Effect": "Allow",
             "Principal": {
-                "AWS": <arn>
+                "AWS": "<arn>"
             },
             "Action": "sts:AssumeRole"
         }