How can I pass secrets or variables to CircleCi across different environments?

Question

I am new to circleci, and trying to deploy to aws ecs and ecr services. I am wondering what is the best practice when it comes to passing variables