diff --git a/rules/cloud/aws/aws_update_login_profile.yml b/rules/cloud/aws/aws_update_login_profile.yml
index 6815fe2fe..d8468d6de 100644
--- a/rules/cloud/aws/aws_update_login_profile.yml
+++ b/rules/cloud/aws/aws_update_login_profile.yml
@@ -19,7 +19,7 @@ detection:
     condition: selection_source and not filter
 fields:
     - userIdentity.arn
-    - responseElements.accessKey.userName
+    - requestParameters.userName
     - errorCode
     - errorMessage
 falsepositives: