AWS Systems Manager Parameter Store
Hierarchical configuration and secret store with optional KMS-encrypted SecureString parameters.
- Provider
- aws
- Kind
- Key management
- Category
- Security
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| envelopeEncryption | boolean | — | no | false | inherited |
| highThroughput | boolean | — | no | false | inherited |
| hsm | boolean | — | no | false | inherited |
| managed | boolean | — | no | true | ▸ true |
| parameterType | enum | string | string-list | secure-string | no | string | inherited |
| rotationAutomated | boolean | — | no | false | ▸ false |
| rotationDays | integer | — | no | — | inherited |
| tier | enum | standard | advanced | no | standard | inherited |
| versionsRetained | integer | — | no | 100 | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "ssm-parameter-store", component: "aws-ssm-parameter-store" }Certificate Management Servicealibaba-certificate-managementData Encryption Servicealibaba-data-encryption-serviceAWS Certificate Manageraws-acmAWS KMSaws-kmsAWS Payment Cryptographyaws-payment-cryptographyAWS Private Certificate Authorityaws-private-caAWS Secrets Manageraws-secrets-managerAWS Signeraws-signerAWS CloudHSMcloudhsmArtifact Signingazure-artifact-signingAzure Cloud HSMazure-cloud-hsmAzure Dedicated HSMazure-dedicated-hsmAzure Key Vaultazure-key-vaultAzure Key Vault Managed HSMazure-managed-hsmAdvanced Certificate Managercloudflare-advanced-certificate-managerCloudflare Geo Key Managercloudflare-geo-key-managerCloudflare Keyless SSLcloudflare-keyless-sslCloudflare mTLS client certificatescloudflare-mtlsCloudflare Origin CAcloudflare-origin-caCloudflare Secrets Storecloudflare-secrets-storeCloudflare Universal SSLcloudflare-ssl-tlsBitwardenbitwardencert-managercert-managerCyberArk ConjurconjurDopplerdopplerEJBCAejbcaEntrust nShield HSMentrust-nshieldHashiCorp Vaulthashicorp-vaultHCP Vault Dedicatedhcp-vaultInfisicalinfisicalGeneric key managementkey-management1Password Connectonepassword-connectOpenBaoopenbaoSealed Secretssealed-secretsSmallstep step-castep-caThales Luna HSMthales-luna-hsmCertificate Authority Servicegoogle-certificate-authority-serviceCertificate Managergoogle-certificate-managerCloud External Key Managergoogle-cloud-ekmCloud HSMgoogle-cloud-hsm
and 13 more → Key management page# yaml-language-server: $schema=../../schema/component.schema.json # Systems Manager Parameter Store: hierarchical configuration and secret store. Per "AWS Systems Manager # Parameter Store" the standard tier is the default, encryption is optional via the SecureString type and # KMS, credential rotation is none, and the 100 most recent versions of each parameter are retained. schemaVersion: "1" type: "component" id: "aws-ssm-parameter-store" kind: "key-management" provider: "aws" docs: "https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html" defaults: rotationAutomated: false managed: true properties: tier: type: "enum" values: ["standard", "advanced"] default: "standard" parameterType: type: "enum" values: ["string", "string-list", "secure-string"] default: "string" highThroughput: type: "boolean" default: false versionsRetained: type: "integer" default: 100