diff --git a/.drone.yml b/.drone.yml
index 2c90a2f78cf..845339558b6 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -5589,13 +5589,13 @@ kind: secret
 name: azure_tenant
 ---
 get:
-  name: public-key
+  name: public-key-b64
   path: infra/data/ci/packages-publish/gpg
 kind: secret
 name: packages_gpg_public_key
 ---
 get:
-  name: private-key
+  name: private-key-b64
   path: infra/data/ci/packages-publish/gpg
 kind: secret
 name: packages_gpg_private_key
@@ -5624,7 +5624,25 @@ get:
 kind: secret
 name: packages_secret_access_key
 ---
+get:
+  name: aws_region
+  path: secret/data/common/aws-marketplace
+kind: secret
+name: aws_region
+---
+get:
+  name: aws_access_key_id
+  path: secret/data/common/aws-marketplace
+kind: secret
+name: aws_access_key_id
+---
+get:
+  name: aws_secret_access_key
+  path: secret/data/common/aws-marketplace
+kind: secret
+name: aws_secret_access_key
+---
 kind: signature
-hmac: 484a60c2bddc31ee390456bae87bf13d2cd1c3eef0b4b07460d84c0978b14340
+hmac: 6941895851aab38b5181aaed1ee43f9caeebc4c33fb3666762e2b5ca60c8d35d
 
 ...
diff --git a/scripts/drone/vault.star b/scripts/drone/vault.star
index c1a4e25c5bb..f6cd18fd8d8 100644
--- a/scripts/drone/vault.star
+++ b/scripts/drone/vault.star
@@ -34,10 +34,49 @@ def secrets():
         vault_secret(azure_tenant, 'infra/data/ci/datasources/cpp-azure-resourcemanager-credentials', 'tenant_id'),
     
         # Package publishing
-        vault_secret('packages_gpg_public_key', 'infra/data/ci/packages-publish/gpg', 'public-key'),
-        vault_secret('packages_gpg_private_key', 'infra/data/ci/packages-publish/gpg', 'private-key'),
-        vault_secret('packages_gpg_passphrase', 'infra/data/ci/packages-publish/gpg', 'passphrase'),
-        vault_secret('packages_service_account', 'infra/data/ci/packages-publish/service-account', 'credentials.json'),
-        vault_secret('packages_access_key_id', 'infra/data/ci/packages-publish/bucket-credentials', 'AccessID'),
-        vault_secret('packages_secret_access_key', 'infra/data/ci/packages-publish/bucket-credentials', 'Secret'),
+        vault_secret(
+            'packages_gpg_public_key',
+            'infra/data/ci/packages-publish/gpg',
+            'public-key-b64',
+        ),
+        vault_secret(
+            'packages_gpg_private_key',
+            'infra/data/ci/packages-publish/gpg',
+            'private-key-b64',
+        ),
+        vault_secret(
+            'packages_gpg_passphrase',
+            'infra/data/ci/packages-publish/gpg',
+            'passphrase',
+        ),
+        vault_secret(
+            'packages_service_account',
+            'infra/data/ci/packages-publish/service-account',
+            'credentials.json',
+        ),
+        vault_secret(
+            'packages_access_key_id',
+            'infra/data/ci/packages-publish/bucket-credentials',
+            'AccessID',
+        ),
+        vault_secret(
+            'packages_secret_access_key',
+            'infra/data/ci/packages-publish/bucket-credentials',
+            'Secret',
+        ),
+        vault_secret(
+            'aws_region',
+            'secret/data/common/aws-marketplace',
+            'aws_region',
+        ),
+        vault_secret(
+            'aws_access_key_id',
+            'secret/data/common/aws-marketplace',
+            'aws_access_key_id',
+        ),
+        vault_secret(
+            'aws_secret_access_key',
+            'secret/data/common/aws-marketplace',
+            'aws_secret_access_key',
+        ),
     ]