Right now we are passing the Apple shared secret and Sentry DSN to the API ECS service as plaintext environment variables. It would probably be smarter to pass them through SSM SecureString parameters like we do for the database password, secret key, etc.