{{- if hasSecrets .}}
Secrets:
{{- range $name, $secret := .Secrets}}
- Name: {{$name}}
{{- if $secret.RequiresImport}}
  ValueFrom:
    Fn::ImportValue: {{ quote $secret.ValueFrom }}
{{- else}}
  ValueFrom: {{if not $secret.RequiresSub }} {{$secret.ValueFrom}} {{- else}} !Sub 'arn:${AWS::Partition}:{{$secret.Service}}:${AWS::Region}:${AWS::AccountId}:{{$secret.ValueFrom}}' {{- end}}
{{- end}}   
{{- end}}
{{- end}}
{{- if .NestedStack}}{{$stackName := .NestedStack.StackName}}
{{- range $secret := .NestedStack.SecretOutputs}}
- Name: {{toSnakeCase $secret}}
  ValueFrom:
    Fn::GetAtt: [{{$stackName}}, Outputs.{{$secret}}]
{{- end}}
{{- end}}