====== SSM Parameter Store ======

**What it is:** A feature of AWS Systems Manager to store configuration data and secrets as parameters.

**What it’s for:**
  * Store app configs (URLs, flags) and secrets (passwords) securely.
  * Provide a central place to manage environment variables.
  * Control access via IAM.

**Key ideas:**
  * Parameter types (common):
    * **String**
    * **StringList**
    * **SecureString** (encrypted with KMS)
  * Great for config + moderate secret needs; Secrets Manager is more specialized for rotation.

**Exam cues:**
  * “store configuration values centrally” → Parameter Store.
  * “encrypt parameter value with KMS” → SecureString.

**Hard words:**
  * *parameter* /pəˈræmɪtər/: tham số/biến cấu hình
  * *configuration* /kənˌfɪɡjəˈreɪʃn/: cấu hình
  * *encrypt* /ɪnˈkrɪpt/: mã hóa