This message was deleted.

My setup is different than yours (ECS not EKS) but I pass in bitbucket creds as env vars. Then I have terraform load the rest of my secrets from Secrets Manager. Atlantis has iam perms needed to access secrets and provision resources.