Third Party Credentials not Masked

The only users that have access to third party credentials are system admins. Best practices dictate you only have a handful of system admins in production who would be cleared to view private keys.

True , in our case there are 2 admins one who is global Appian admin and other system admin who also has access to AWS instance. The global admin should not be able to see the AWS credentials .If mask feature is available the passwords and keys should be masked or encrypted rather than showing them as plain text. I still feel there might be an issue during our Audit

There is no realistic way you are going to be able to hide system/service credentials inside of Appian from an Appian System Admin. You may want to rethink your permission structures.

This seems to have been fixed in 18.1 we have a POC instance running on 18.1 and i can see the credentials being masked and option to clear them as well.

This seems to have been fixed in 18.1 we have a POC instance running on 18.1 and i can see the credentials being masked and option to clear them as well.