[DOCS-11171] Update Amazon S3 destination (#29825)

* update datadog archives destination

* update

* Update layouts/shortcodes/observability_pipelines/destination_settings/datadog_archives_amazon_s3.en.md

* Update layouts/shortcodes/observability_pipelines/destination_settings/datadog_archives_amazon_s3.en.md

* update again

* Update layouts/shortcodes/observability_pipelines/destination_settings/datadog_archives_amazon_s3.en.md

* Update layouts/shortcodes/observability_pipelines/destination_settings/datadog_archives_amazon_s3.en.md

* Update layouts/shortcodes/observability_pipelines/destination_settings/datadog_archives_amazon_s3.en.md

Author: maycmlee

layouts/shortcodes/observability_pipelines/destination_settings/datadog_archives_amazon_s3.en.md

@@ -10,10 +10,12 @@
         - Standard-IA
         - One Zone-IA
     - If you wish to rehydrate from archives in another storage class, you must first move them to one of the supported storage classes above.
-1. Optionally, select an AWS authentication option. If you select **Assume role**:
+1. Optionally, select an AWS authentication option. If you are only using the [user or role you created earlier][10054] for authentication, do not select **Assume role**. The **Assume role** option should only be used if the user or role you created earlier needs to assume a different role to access the specific AWS resource and that permission has to be explicitly defined.<br>If you select **Assume role**:
     1. Enter the ARN of the IAM role you want to assume.
     1. Optionally, enter the assumed role session name and external ID.
+    - **Note:** The [user or role you created earlier][10054] must have permission to assume this role so that the Worker can authenticate with AWS.
 
 [10051]: /observability_pipelines/destinations/#template-syntax
 [10052]: /logs/log_configuration/archives/?tab=awss3#storage-class
-[10053]: https://aws.amazon.com/s3/storage-classes/intelligent-tiering/
+[10053]: https://aws.amazon.com/s3/storage-classes/intelligent-tiering/
+[10054]: /observability_pipelines/destinations/amazon_s3/?tab=docker#set-up-an-iam-policy-that-allows-workers-to-write-to-the-s3-bucket