Including a secret key in a plaintext configuration file is really not something to do. Alternatives:

- use the default local environment variables AWS_*

- run it in AWS and use ambient permissions (instance role or execution role)

- Use IAM Roles Anywhere

- Use SES SMTP credentials

Or at least encourage folks to be safe-ish by providing a template for a least-privilege IAM role they can use.