I am deploying to production soon and I wanted to know if there was a way to avoid storing my db credentials in ENV for prisma. Most best practice docs for lambda says to pull from SSM at runtime, rather than using ENV because if you want to inject it into env, then it will probably be in your cloudformation stack. Any advice?