diff --git a/content/en/flux/guides/mozilla-sops.md b/content/en/flux/guides/mozilla-sops.md
index 754184b46..5c3398f2d 100644
--- a/content/en/flux/guides/mozilla-sops.md
+++ b/content/en/flux/guides/mozilla-sops.md
@@ -311,7 +311,7 @@ kubectl -n flux-system rollout restart deployment/kustomize-controller
 ```
 
 {{% alert color="info" title="Bootstrap" %}}
-Note that when using `flux bootstrap` you can [set the annotation](/flux/cheatsheets/bootstrap/#iam-roles-for-service-accounts) to take effect at install time.
+Note that when using `flux bootstrap` you can [set the annotation](/flux/installation/configuration/workload-identity/#aws-iam-roles-for-service-accounts) to take effect at install time.
 {{% /alert %}}
 
 #### Azure
@@ -382,7 +382,7 @@ spec:
   selector: ${IDENTITY_NAME}
 ```
 
-[Customize your Flux Manifests](/flux/installation/configuration/boostrap-customization/) so that kustomize-controller has the proper credentials.
+[Customize your Flux Manifests](/flux/installation/configuration/workload-identity/#azure-workload-identity) so that kustomize-controller has the proper credentials.
 Patch the kustomize-controller Pod template so that the label matches the `AzureIdentity` selector.
 Additionally, the SOPS specific environment variable `AZURE_AUTH_METHOD=msi` to activate the proper auth method within kustomize-controller.
 
@@ -498,7 +498,7 @@ iam.gke.io/gcp-service-account=<SERVICE_ACCOUNT_ID>@<PROJECT_ID>.iam.gserviceacc
 ```
 
 {{% alert color="info" title="Bootstrap" %}}
-Note that when using `flux bootstrap` you can [set the annotation](/flux/installation/configuration/workload-identity/) to take effect at install time.
+Note that when using `flux bootstrap` you can [set the annotation](/flux/installation/configuration/workload-identity/#gcp-workload-identity) to take effect at install time.
 {{% /alert %}}
 
 ## GitOps workflow