diff --git a/plugins/out_prometheus_remote_write/remote_write.c b/plugins/out_prometheus_remote_write/remote_write.c
index 85cfe9840cb..c9c534347cc 100644
--- a/plugins/out_prometheus_remote_write/remote_write.c
+++ b/plugins/out_prometheus_remote_write/remote_write.c
@@ -183,7 +183,7 @@ static int http_post(struct prometheus_remote_write_context *ctx,
          * - 200: OK
          * - 201: Created
          * - 202: Accepted
-         * - 203: no authorative resp
+         * - 203: no authoritative resp
          * - 204: No Content
          * - 205: Reset content
          *
@@ -200,10 +200,16 @@ static int http_post(struct prometheus_remote_write_context *ctx,
                 flb_plg_error(ctx->ins, "%s:%i, HTTP status=%i",
                               ctx->host, ctx->port, c->resp.status);
             }
+            #if defined(FLB_HAVE_SIGNV4) && defined(FLB_HAVE_AWS)
+            if (c->resp.status == 403 && ctx->has_aws_auth == FLB_TRUE) {
+                flb_plg_info(ctx->ins, "auth error, refreshing creds");
+                ctx->aws_provider->provider_vtable->refresh(ctx->aws_provider);
+            }
+            #endif
             out_ret = FLB_RETRY;
         }
         else if (c->resp.status == 400) {
-            /* Returned 400 status means unrecoverable. Immidiately
+            /* Returned 400 status means unrecoverable. Immediately
              * returning as a error. */
             if (ctx->log_response_payload &&
                 c->resp.payload && c->resp.payload_size > 0) {