Skip to main content
Level 1
September 8, 2026
Question

Adding OSGi Configurations in AMS

  • September 8, 2026
  • 1 reply
  • 7 views

We are looking to manage OSGi configurations in the AMS environment instead of storing sensitive values in the codebase. In Adobe Cloud Manager, there is an option to manage environment-specific secrets and configurations. Is there a similar approach available in AMS, and if so, how can we manage these configurations securely?

    1 reply

    Jineet_Vora
    Adobe Champion and Community Advisor
    Adobe Champion and Community Advisor
    September 8, 2026

    @ayetukur - Unfortunately, the Cloud Manager in AMS doesn’t provide you “environment variables” like AEMaaCS Cloud Manager where you can define secrets securely. It only provides “pipeline variables” where you can define secrets but that secret is for build and not for your running AEM instance: https://developer.adobe.com/experience-cloud/cloud-manager/reference/api#operation/getEnvironmentVariables

    Using the traditional Crypto Support in AEM AMS is one option where you encrypt the secret on each environment and then store it in OSGi configs https://experienceleague.adobe.com/en/docs/experience-manager-65/content/security/encryption-support-for-configuration-properties

    Another secure way is to store the secrets in AWS Secrets Manager and if your AMS infra is on AWS as well then you can setup cross account resource policy between the two accounts and you can then request the secret from Adobe hosted EC2 author/publisher. We use something very similar and is an approved/secured way of fetching the secrets in AEM.