Can we let secrets be overridable in AWS Batch?

Question

Right now, I have a general docker container that I'm using for running different types of batch jobs and I'm able to override the command and environment variables for each type of job but there doesn't seem to be the option to override secrets so the secrets I pass to the job (via regular environment variables) are in plaintext.

https://docs.aws.amazon.com/batch/latest/APIReference/API_SubmitJob.html

Answer

You can store your secrets in Secrets Manager and retrieve them in your code - https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets.html

You can pass the ARN to the secret as an environment variable but not the actual secret value

Can we let secrets be overridable in AWS Batch?

Conteúdo relevante