Specify sensitive data - AWS Batch
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

Specify sensitive data

With AWS Batch, you can inject sensitive data into your jobs by storing your sensitive data in either AWS Secrets Manager secrets or AWS Systems Manager Parameter Store parameters, and then reference them in your job definition.

Secrets can be exposed to a job in the following ways:

  • To inject sensitive data into your containers as environment variables, use the secrets job definition parameter.

  • To reference sensitive information in the log configuration of a job, use the secretOptions job definition parameter.

Topics