diff --git a/os_collect_config/cfn.py b/os_collect_config/cfn.py
index 87b7571..a4287b0 100644
--- a/os_collect_config/cfn.py
+++ b/os_collect_config/cfn.py
@@ -42,6 +42,7 @@ opts = [
     cfg.MultiStrOpt('path',
                     help='Path to Metadata'),
     cfg.StrOpt('secret-access-key',
+               secret=True,
                help='Secret Access Key'),
     cfg.StrOpt('access-key-id',
                help='Access Key ID'),