You can easily inject them to a container environment variable (at deploy time). You can also fetch these secrets at runtime (using aws sdk).

Do you need anything else? I'll be happy to explore your use-case and see what we can do.