@little-cartoon-10569 @astonishing-dentist-11149 I looked into

aws.ecs.Secret

interface and it looks like it is manually maintained https://github.com/pulumi/pulumi-aws/blob/1fc37e531140fd0dfb6b39cbfca9a99dadd19be2/sdk/nodejs/ecs/container.ts#L257 as opposed to automatic generation from the spec like

aws-native

does it. Until now I was not aware of that interface because nothing except

awsx

seems to call it, hence I'd consider it undocumented https://www.pulumi.com/registry/packages/aws/api-docs/ecs/taskdefinition/#containerdefinitions_nodejs This issue supports my theory https://github.com/pulumi/pulumi-aws/issues/2322 about it. @billowy-army-68599 As the author of the issue above, could you please confirm or correct my suspicion?

Huh, sounds like I should not be using, I am not sure that using SSM in ENV is allowed, so I will need to do some more research.