An AWS Lambda function requires several environment variables with secret values. The secret values should be obscured in the Lambda console and API output even for users who have permission to use the key. What is the best way to achieve this outcome and MINIMIZE complexity and latency?