SSM Parameter Store

What it is: A feature of AWS Systems Manager to store configuration data and secrets as parameters.

What it’s for:

• Store app configs (URLs, flags) and secrets (passwords) securely.
• Provide a central place to manage environment variables.
• Control access via IAM.

Key ideas:

• Parameter types (common):
  • String
  • StringList
  • SecureString (encrypted with KMS)
• Great for config + moderate secret needs; Secrets Manager is more specialized for rotation.

Exam cues:

• “store configuration values centrally” → Parameter Store.
• “encrypt parameter value with KMS” → SecureString.

Hard words:

• *parameter* /pəˈræmɪtər/: tham số/biến cấu hình
• *configuration* /kənˌfɪɡjəˈreɪʃn/: cấu hình
• *encrypt* /ɪnˈkrɪpt/: mã hóa