diff --git a/README.md b/README.md
index 42bdd71..7b2e577 100644
--- a/README.md
+++ b/README.md
@@ -55,7 +55,7 @@ The subsequent queries (hot run) on the same table will be served from the cache
 The same data is never downloaded more than once.
 Iceberg supports predicate pushdown, which helps with partitioned tables to reduce the amount of data downloaded for partitioned tables.
 
-# Governance
+### Governance
 
 UniverSQL relies on Snowflake for access control and 
 
@@ -101,18 +101,18 @@ If your Snowflake account (`snowflake --account`) is a Polaris Catalog, UniverSQ
 Since Snowflake doesn't provide direct access to data lake, UniverSQL uses your local credentials for cloud storage so [make sure you configure the cloud SDKs](#install-data-lake-sdks).
 You should install the your cloud's SDK and configure it with your credentials.
 
-#### AWS
+##### AWS
 
 [Install](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) and [configure](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html#sso-configure-profile-token-auto-sso) AWS CLI.
 If you would like to use AWS client id / secret, you can use `aws configure` to set them up.
 By default, UniverSQL uses your default AWS profile, you can pass `--aws-profile` option to `universql` to use a different profile than the default profile.
 
-##### Google Cloud
+###### Google Cloud
 
 [Install](https://cloud.google.com/sdk/docs/initializing) and [configure](https://cloud.google.com/sdk/docs/authorizing) Google Cloud SDK. You can use `gcloud auth application-default login` to login with your Google Cloud account.
 By default, UniverSQL uses your default GCP account attached to `gcloud`, you can pass `--gcp-account` option to `universql` to use a different profile than the default account.
 
-##### Azure
+###### Azure
 
 [Install](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli) and [configure](https://learn.microsoft.com/en-us/cli/azure/authenticate-azure-cli-interactively) Azure CLI.
 By default, UniverSQL uses [your default Azure tenant](https://learn.microsoft.com/en-us/cli/azure/manage-azure-subscriptions-azure-cli?tabs=bash#change-the-active-tenant) attached to `az`, you can pass `--azure-tenant` option to `universql` to use a different profile than the default account.