The CloudFormation Plugin should use a password field when entering the AWS Secret Key to prevent users from accessing this information that may not need to know the key.