Release: App Runner adds support for referencing secrets and configurations from AWS Secrets Manager and AWS Systems Manager Parameter Store on January 5, 2023

AWS App Runner now supports referencing secrets and configuration data stored in AWS Secrets Manager and AWS SSM Parameter Store in App Runner service.

Release date: January 5, 2023

Changes

AWS App Runner now supports securely referencing secrets and configuration data that are stored in Secrets Manager and SSM
 Parameter Store by adding them as environment variables in your App Runner service.

Secrets Manager and SSM
 Parameter Store are AWS services that provide secure storage and reliable management of sensitive data such as configuration data and secrets. Examples of data you can store include passwords, database strings or connection parameters, license codes, API keys, and application versions. App Runner leverages the capabilities of Secrets Manager and SSM
 Parameter Store to integrate a more secure experience for your applications using App Runner service.

App Runner only stores reference to the Amazon Resource Name (ARN) of the secret or parameter stored in Secrets Manager or SSM
 Parameter Store. This ensures that your sensitive data isn't visible to others in App Runner service configurations and application logs. As such, secrets and parameters are managed in a way that's completely isolated from your App Runner application code and your App Runner service configuration.

For more information, see Referencing environment variables in the AWS App Runner Developer Guide.