Hi, if I’m deploying using ECS, do I have to store secrets (such as Snowflake credentials) within Prefect Cloud, or can I somehow keep them within my infrastructure? I’m guessing I could access them using AWS secrets manager, or within the docker image (prob not a great idea), but I’m wondering what the best practice is. Thanks

You don’t have to use Prefect Cloud. You can use whatever you want, and AWS Secrets manager sounds good to me. I think using Cloud or Secrets Manager are analogous and the most frictionless way to do it

@Jonathan Mathews @Kevin Kho We deploy using ECS too! We’ve set up a github action to run the flow registration on every push to main, and our secrets live in the repo itself as github secrets. I hope this helps!