diff --git a/pkg/nodeconfig/nodeconfig.go b/pkg/nodeconfig/nodeconfig.go
index 09c97ae019..5cc25d5a2d 100644
--- a/pkg/nodeconfig/nodeconfig.go
+++ b/pkg/nodeconfig/nodeconfig.go
@@ -102,11 +102,15 @@ func isSecret(key string) bool {
 		version.ProgramUpper + "_DATASTORE_ENDPOINT",
 		version.ProgramUpper + "_AGENT_TOKEN",
 		version.ProgramUpper + "_CLUSTER_SECRET",
+		"AWS_ACCESS_KEY_ID",
+		"AWS_SECRET_ACCESS_KEY",
 		"--token",
 		"-t",
 		"--agent-token",
 		"--datastore-endpoint",
 		"--cluster-secret",
+		"--etcd-s3-access-key",
+		"--etcd-s3-secret-key",
 	}
 	for _, secret := range secretData {
 		if key == secret {