Sorry. One of those should have been Set up file and image uploads to S3.
See the linked topics that describe how to configure S3, but yes, the app.yml is what you want to change (since you didn’t mention web_only.yml)
Yes. Entering them in the YML file hides them from the UX.