title: How should I pass sensitive environment variables to Amazon ECS tasks?
body: <p>What is the recommended way to pass sensitive environment variables, e.g. passwords, to <a href="https://aws.amazon.com/documentation/ecs/">Amazon ECS</a> tasks? With Docker Compose, I can use <a href="https://docs.docker.com/compose/compose-file/#environment">key-only environment variables</a>, which results in the values being read from the OS environment. I can't see any corresponding method for <a href="http://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html">ECS task definitions</a> however.</p>