diff --git a/ansible/password-pipe b/ansible/password-pipe
index e2d14df8..3fec16f7 100755
--- a/ansible/password-pipe
+++ b/ansible/password-pipe
@@ -1,2 +1,2 @@
 #!/bin/sh
-exec gpg --quiet --decrypt --batch <~/.ssh/ooni-sysadmin.vaultpw.gpg
+exec aws ssm get-parameter --name /oonidevops/secrets/devops_vault_password --profile oonidevops_user_prod --query "Parameter.Value" --with-decryption --output text