diff --git a/cmd/scw/testdata/test-all-usage-s2s-vpn-connection-create-usage.golden b/cmd/scw/testdata/test-all-usage-s2s-vpn-connection-create-usage.golden
index 8f5f002a4c..6c79912edf 100644
--- a/cmd/scw/testdata/test-all-usage-s2s-vpn-connection-create-usage.golden
+++ b/cmd/scw/testdata/test-all-usage-s2s-vpn-connection-create-usage.golden
@@ -18,6 +18,8 @@ ARGS:
   [esp-ciphers.{index}.integrity]        (unknown_integrity | sha256 | sha384 | sha512)
   [esp-ciphers.{index}.dh-group]         (unknown_dhgroup | modp2048 | modp3072 | modp4096 | ecp256 | ecp384 | ecp521 | curve25519)
   [enable-route-propagation]            Defines whether route propagation is enabled or not.
+  [secret.id]                           
+  [secret.revision]                     
   vpn-gateway-id                        ID of the VPN gateway to attach to the connection
   customer-gateway-id                   ID of the customer gateway to attach to the connection
   [bgp-config-ipv4.routing-policy-id]   
diff --git a/docs/commands/s2s-vpn.md b/docs/commands/s2s-vpn.md
index b99b0052ac..02880904d3 100644
--- a/docs/commands/s2s-vpn.md
+++ b/docs/commands/s2s-vpn.md
@@ -67,6 +67,8 @@ scw s2s-vpn connection create [arg=value ...]
 | esp-ciphers.{index}.integrity | One of: `unknown_integrity`, `sha256`, `sha384`, `sha512` |  |
 | esp-ciphers.{index}.dh-group | One of: `unknown_dhgroup`, `modp2048`, `modp3072`, `modp4096`, `ecp256`, `ecp384`, `ecp521`, `curve25519` |  |
 | enable-route-propagation |  | Defines whether route propagation is enabled or not. |
+| secret.id |  |  |
+| secret.revision |  |  |
 | vpn-gateway-id | Required | ID of the VPN gateway to attach to the connection |
 | customer-gateway-id | Required | ID of the customer gateway to attach to the connection |
 | bgp-config-ipv4.routing-policy-id |  |  |
diff --git a/internal/namespaces/s2s_vpn/v1alpha1/s2s_vpn_cli.go b/internal/namespaces/s2s_vpn/v1alpha1/s2s_vpn_cli.go
index 8f7ccae409..5f0a2f3307 100644
--- a/internal/namespaces/s2s_vpn/v1alpha1/s2s_vpn_cli.go
+++ b/internal/namespaces/s2s_vpn/v1alpha1/s2s_vpn_cli.go
@@ -799,6 +799,18 @@ func s2sVpnConnectionCreate() *core.Command {
 				Deprecated: false,
 				Positional: false,
 			},
+			{
+				Name:       "secret.id",
+				Required:   false,
+				Deprecated: false,
+				Positional: false,
+			},
+			{
+				Name:       "secret.revision",
+				Required:   false,
+				Deprecated: false,
+				Positional: false,
+			},
 			{
 				Name:       "vpn-gateway-id",
 				Short:      `ID of the VPN gateway to attach to the connection`,