diff --git a/engine/context/ecs-integration.md b/engine/context/ecs-integration.md
index 48fd136d5f..a74f3d96cf 100644
--- a/engine/context/ecs-integration.md
+++ b/engine/context/ecs-integration.md
@@ -141,6 +141,7 @@ services:
 secrets:
   foo:
     name: "arn:aws:secretsmanager:eu-west-3:1234:secret:foo-ABC123"
+    external: true
 ```
 
 Secrets will be available at runtime for your service as a plain text file `/run/secrets/foo`.