[humblepie]

Hmm, would the stored job data still include the AWS credentials? That is, if I change the artifact S3 credentials and I run "nomad job plan" it will show the diff of the AWS keys. That means somewhere in the nomad raft logs the keys are exposed.

[CGamesPlay]

Yes, exactly. Definitely not ideal, but potentially a workaround depending on the security requirements.