Using Vault provider to grab secrets from Vault at runtime for a Java spring app on ECS

I have a Java spring app on running on AWS ECS(provisioned with Terraform), and currently there is a startup .sh script that uses crossing-go to grab an S3 file that exports environment variables, and then that startup .sh script sources the grabbed S3 file in order to run the export commands the file contains, thereby setting environment variables.

I want to get off of crossing-go and needing the S3 files to set out environment variables.

There is a vault server for storing secrets up already too, and I can place them where/as needed.

Is there a smooth way of transitioning off of S3 and crossing-go, and moving to Terraform/Vault entirely? It looks like this tutorial gives something of a similar path of what is being sought, but not sure: