# Notification Callbacks and Secrets

**URL:** <https://forum.ansible.com/t/notification-callbacks-and-secrets/44670>\
**Category:** Get Help\
**Tags:** awx\
**Created:** [October 13, 2025, 5:15pm UTC](https://forum.ansible.com/t/notification-callbacks-and-secrets/44670 "2025-10-13T17:15:36Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![spribyl](https://avatars.discourse-cdn.com/v4/letter/s/b9bd4f/32.png) [@spribyl](https://forum.ansible.com/u/spribyl)\
**Post date:** [October 13, 2025, 5:15pm UTC](https://forum.ansible.com/t/notification-callbacks-and-secrets/44670/1 "2025-10-13T17:15:36Z")

</div>

I’m working on a python notification\_callback and looking for advice on managing secrets specifically in an AWX context. If I use ENV vars for the vault password I’m able to do everything, however in AWX the vault password is passed using --ask-vault-pass and I’m not able to decrypt things.

- The python can use the requests module to call a URL, but I still need to access a secret some how. Even if I use a 3rd party vault I still need to store and access the secret for that in ansible/AWX context.
- I’ve also POC’d using ansible\_runner to run a play to do the notification, works great when the ENV vars are set, but not when using --ask-vault-pass which is how AWX jobs manage vault access.

Some questions:

- Does ansible.cfg support vaulted settings, if so please help me with the documentation.
- Is there a way to get to the vault password in python in the notification\_callback context, is there a data structure or api?
- Is there an example callback that uses encrypted secrets? ARA and slack don’t seem to encrypt tokens, mail is local only, etc.