Skip to content

SSM Paramaters store

Secure sotrage for configuration and secrets(optional encription with KMS) - Easy with SDK - Version tracking of configuration/secrets - Seciurity through IAM - Notifications with Amazon EventBridge - Integration with CloudFormation

Paramater Polices

  • Allow expiration date to paramater TTL
    • Force changing passowrds
  • Can assaing mulitiple policeies at a time
aws ssm get-paramaters --names /my-app/dev/db-url --with-decryption

paramater policeies

SSM Paramater Store Hierarchy

Paramater Store Hierarchy

SSM