falcon_discover inventory plugin - custom credential injection

[ghost]

Hello,

I am attempting to store the client_id and client_secret for the API call as a custom credential on the automation controller. Whenever I try to do a lookup on those credentials, they are not found. Here is what the file looks like:

**plugin: crowdstrike.falcon.falcon_discover
use_extra_vars: true
client_id: "{{ lookup('env', 'inventory_client_id') }}"
client_secret: "{{ lookup('env', 'inventory_client_secret') }}"
cloud: us-gov-1
hostname: external_ip
filter: "entity_type:'unmanaged'+cloud_provider:'AWS'"
keyed_groups:

# places host in a group named cloud_<cloud_provider> (e.g. cloud_AWS) if the asset is a cloud asset

• prefix: aws
  key: os_version**

What am I missing here?