diff --git a/README.md b/README.md
index 5ea139c..721e822 100644
--- a/README.md
+++ b/README.md
@@ -75,12 +75,12 @@ values, and provisions the new namespace.
 * **Network Security:** A `NetworkPolicy` is deployed within each tenant namespace
 to restrict ingress/egress traffic. The Jupyter notebook can only communicate
 with necessary services (like MinIO) and the internet, preventing cross-namespace communication.
-**Automated & Isolated S3 Setup:** To prevent exposing admin credentials outside the storage
+* **Automated & Isolated S3 Setup:** To prevent exposing admin credentials outside the storage
 infrastructure, a Kubernetes Job runs directly within the minio namespace during tenant provisioning.
 This job connects to the MinIO admin API locally, creates a reference bucket (Read-Only), a work bucket (Read/Write),
 and generates dedicated, scoped S3 credentials. It then creates the resulting secret containing only
 tenant-scoped credentials directly in the target tenant namespace.
-**dedicated, scoped S3 credentials**. These credentials are saved as a Kubernetes
+* **dedicated, scoped S3 credentials**. These credentials are saved as a Kubernetes
 Secret locally in the tenant's namespace.
 * **Security Context:** The Docker images use the `tini` init system and execute
 application containers as a non-root user.