diff --git a/.changelog/17885.txt b/.changelog/17885.txt
new file mode 100644
index 0000000000..2cd690488d
--- /dev/null
+++ b/.changelog/17885.txt
@@ -0,0 +1,2 @@
+```release-note:bug
+ca: Fixed a bug where the Vault provider was not passing the configured role param for AWS auth