We should be able to use a config.json file that can be encrypted/decrypted with KMS to store configuration items.