diff --git a/plugin/service/host/README.md b/plugin/service/host/README.md
index 16337f9..6c18f3d 100644
--- a/plugin/service/host/README.md
+++ b/plugin/service/host/README.md
@@ -108,6 +108,14 @@ The following `attributes` are valid on an AWS host catalog resource:
   be performed. See the [Credential Rotation](../../../README.md#credential-rotation) readme for more information.
 - `region` (string): The region to configure the host catalog for. All host sets
   in this catalog will be configured for this region.
+- `role_arn` (string): The AWS Role ARN used for `AssumeRole` authentication. If
+  provided, `disable_credential_rotation` must be also set to `true.
+- `role_external_id` (string):  The external id configured for the `AssumeRole`
+  provider.
+- `role_session_name` (string): The session name configured for the `AssumeRole`
+  provider.
+- `role_tags` (object): The key-value pair tags configured for the `AssumeRole`
+  provider.
 
 The following `secrets` are required on an AWS host catalog resource: