The secret management seems overly complex, why not use https://aws.amazon.com/blogs/containers/aws-secrets-controll... or https://kubernetes.io/docs/concepts/configuration/secret/ ?