diff --git a/steps/aws-device-farm-runner/0.0.8/step.yml b/steps/aws-device-farm-runner/0.0.8/step.yml
index 0d83d1893..bf1a5cbf8 100644
--- a/steps/aws-device-farm-runner/0.0.8/step.yml
+++ b/steps/aws-device-farm-runner/0.0.8/step.yml
@@ -31,11 +31,12 @@ is_always_run: false
 is_skippable: false
 run_if: ""
 inputs:
-- access_key_id: $AWS_ACCESS_KEY
+- access_key_id: ""
   opts:
     description: Access key for your AWS/IAM user. Define this as a secret environment
       variable in your workflow.
     is_required: true
+    is_sensitive: true
     summary: ""
     title: AWS Access Key
 - opts:
@@ -44,12 +45,13 @@ inputs:
     is_required: true
     summary: ""
     title: AWS Secret Key
-  secret_access_key: $AWS_SECRET_KEY
+  secret_access_key: ""
 - device_farm_project: ""
   opts:
     description: Project ARNs can be obtained using the AWS CLI `devicefarm list-projects`
       command.
     is_required: true
+    is_sensitive: true
     summary: ""
     title: Device Farm Project ARN
 - billing_method: METERED
@@ -192,12 +194,14 @@ inputs:
     description: Build number
     is_required: true
     title: Build Number
-- aws_region: $AWS_REGION
+- aws_region: ""
   opts:
     description: |
       If you want to specify a different AWS region. Leave
       empty to use the default config/env setting.
     summary: ""
+    is_required: true
+    is_sensitive: true
     title: AWS Region
 - opts:
     description: |-