For target url you can use url from AWS API Gateway. For secret , i recommend to set up it for better security, your secret should follow how to create password in best practise.