diff --git a/doc/Configuration.md b/doc/Configuration.md
index 167983def71d..b5890681ce41 100644
--- a/doc/Configuration.md
+++ b/doc/Configuration.md
@@ -1048,7 +1048,7 @@ This option sets the port which ntp will choose to send time update requests fro
 NOTE: If a Loopback interface is defined on the switch ntp will choose this by default, so this setting
 is **required** if the switch has a Loopback interface and the ntp peer does not have defined routes
 for that address.
- 
+
 ```
 {
 "NTP": {
@@ -1501,6 +1501,29 @@ The list of root ports, all possible breakout modes, and default breakout modes
 }
 ```
 
+### AAA
+
+The AAA table defined the method SONiC used for Authentication, Authorization and Accounting.
+The method could be:
+-   default
+-   local
+-   tacacs+
+-   radius
+
+```
+"AAA": {
+    "authentication": {
+       "login": "local"
+    },
+    "authorization": {
+       "login": "local"
+    },
+    "accounting": {
+       "login": "local"
+    }
+}
+```
+
 For Developers
 ==============