diff --git a/DOCKER_HUB.md b/DOCKER_HUB.md
index c3e0d28..85efdd4 100644
--- a/DOCKER_HUB.md
+++ b/DOCKER_HUB.md
@@ -204,6 +204,8 @@ services:
       # Optional: mount opencode skills from host
       # - ~/.config/opencode/skills:/home/developer/.config/opencode/skills:ro
       # - ~/.agents/skills:/home/developer/.agents/skills:ro
+      # Optional: AWS credentials/SSO config (not read-only — SSO writes token cache)
+      # - ~/.aws:/home/developer/.aws
 
 volumes:
   devbox-data:
diff --git a/docker-compose.yml b/docker-compose.yml
index 48da914..c97fd1f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -40,8 +40,8 @@ services:
       # Optional: persist opencode data (auth, memory, etc.)
       - devbox-data:/home/developer/.local/share/opencode
 
-      # Optional: AWS credentials for Bedrock
-      # - ~/.aws:/home/developer/.aws:ro
+      # Optional: AWS credentials/SSO config (not read-only — SSO writes token cache)
+      # - ~/.aws:/home/developer/.aws
 
 volumes:
   devbox-data: