# prefect-community

Jonathan Mathews

04/05/2022, 8:36 PM
Hi, if I’m deploying using ECS, do I have to store secrets (such as Snowflake credentials) within Prefect Cloud, or can I somehow keep them within my infrastructure? I’m guessing I could access them using AWS secrets manager, or within the docker image (prob not a great idea), but I’m wondering what the best practice is. Thanks
💡 1

Kevin Kho

04/05/2022, 8:37 PM
You don’t have to use Prefect Cloud. You can use whatever you want, and AWS Secrets manager sounds good to me. I think using Cloud or Secrets Manager are analogous and the most frictionless way to do it
💡 1

Fina Silva-Santisteban

04/05/2022, 8:48 PM
@Jonathan Mathews @Kevin Kho We deploy using ECS too! We’ve set up a github action to run the flow registration on every push to main, and our secrets live in the repo itself as github secrets. I hope this helps!
upvote 1