# 57001: 'Secret id' is empty

Log Type: APPLICATION

Log Level: ERROR

## Description

This error means the `Secret id` value is empty in the request or destination configuration. In Segment's Amazon Kinesis Firehose destination, `Secret ID` is a required, read-only setting that functions as the `sts:ExternalId` for the IAM role trust relationship.

### Possible causes

* The `Secret id` parameter was omitted or sent as an empty value.
* The destination's `Secret ID` setting was not configured before the IAM role trust relationship was created.
* The IAM role was configured with a different external ID than the `Secret ID` value from the destination.

### Possible solutions

* Set a non-empty `Secret ID` value in the destination settings. For Amazon Kinesis Firehose destinations, open the Settings tab and use that value as the IAM role `sts:ExternalId`.
* If multiple Kinesis sources share the same IAM role, add each allowed secret to the `sts:ExternalId` array.
* If the `Secret ID` value needs to change, contact support to update it.

#### Additional resources

* [Amazon Kinesis Firehose Destination](/docs/segment/connections/destinations/catalog/amazon-kinesis-firehose)