diff --git a/services/terraform/remote/service_tunnelbroker.tf b/services/terraform/remote/service_tunnelbroker.tf
--- a/services/terraform/remote/service_tunnelbroker.tf
+++ b/services/terraform/remote/service_tunnelbroker.tf
@@ -22,6 +22,7 @@
   apns_config_secret_name     = "tunnelbroker/APNsConfig"
   fcm_config_secret_name      = "tunnelbroker/FCMConfig"
   web_push_config_secret_name = "tunnelbroker/WebPushConfig"
+  wns_config_secret_name      = "tunnelbroker/WNSConfig"
 }
 
 data "aws_secretsmanager_secret" "tunnelbroker_apns" {
@@ -36,6 +37,10 @@
   name = local.web_push_config_secret_name
 }
 
+data "aws_secretsmanager_secret" "tunnelbroker_wns" {
+  name = local.wns_config_secret_name
+}
+
 # RabbitMQ
 resource "aws_mq_broker" "tunnelbroker_rabbitmq" {
   broker_name = "tunnelbroker-rabbitmq"
@@ -115,6 +120,10 @@
         {
           name      = "WEB_PUSH_CONFIG"
           valueFrom = data.aws_secretsmanager_secret.tunnelbroker_web_push.arn
+        },
+        {
+          name      = "WNS_CONFIG"
+          valueFrom = data.aws_secretsmanager_secret.tunnelbroker_wns.arn
         }
       ]
       logConfiguration = {
diff --git a/services/tunnelbroker/src/constants.rs b/services/tunnelbroker/src/constants.rs
--- a/services/tunnelbroker/src/constants.rs
+++ b/services/tunnelbroker/src/constants.rs
@@ -14,6 +14,7 @@
 pub const ENV_APNS_CONFIG: &str = "APNS_CONFIG";
 pub const ENV_FCM_CONFIG: &str = "FCM_CONFIG";
 pub const ENV_WEB_PUSH_CONFIG: &str = "WEB_PUSH_CONFIG";
+pub const ENV_WNS_CONFIG: &str = "WNS_CONFIG";
 
 pub const LOG_LEVEL_ENV_VAR: &str =
   tracing_subscriber::filter::EnvFilter::DEFAULT_ENV;