diff --git a/doc/xml/release.xml b/doc/xml/release.xml
index 7fc644cd5..a314c2e2a 100644
--- a/doc/xml/release.xml
+++ b/doc/xml/release.xml
@@ -78,12 +78,16 @@
                     </release-item>
 
                     <release-item>
-                        <github-issue id="1203"/>
-                        <github-pull-request id="1527"/>
+                        <commit subject="Add WebIdentity authentication for AWS S3.">
+                            <github-issue id="1203"/>
+                            <github-pull-request id="1527"/>
+                        </commit>
+                        <commit subject="Fix mismatched parameters in tlsClientNew() call."/>
 
                         <release-item-contributor-list>
                             <release-item-contributor id="david.steele"/>
                             <release-item-reviewer id="james.callahan"/>
+                            <release-item-reviewer id="reid.thompson"/>
                             <!-- Actually tester, but we don't have a tag for that yet -->
                             <release-item-reviewer id="benjamin.blattberg"/>
                             <release-item-reviewer id="andrew.lecuyer"/>
diff --git a/src/storage/s3/storage.c b/src/storage/s3/storage.c
index 1f88666d0..51b749123 100644
--- a/src/storage/s3/storage.c
+++ b/src/storage/s3/storage.c
@@ -1111,8 +1111,8 @@ storageS3New(
                 driver->credExpirationTime = time(NULL);
                 driver->credHttpClient = httpClientNew(
                     tlsClientNew(
-                        sckClientNew(driver->credHost, S3_STS_PORT, timeout, timeout), driver->credHost, timeout, true, caFile,
-                        caPath, NULL, NULL, NULL),
+                        sckClientNew(driver->credHost, S3_STS_PORT, timeout, timeout), driver->credHost, timeout, timeout, true,
+                        caFile, caPath, NULL, NULL),
                     timeout);
 
                 break;