# Secret values stay in Secrets Manager. ARNs are pinned in locals.tf.