AWS Parameter Store

ELI5 — The Vibe Check

Parameter Store is the free, simpler cousin of Secrets Manager. It stores configuration values and secrets in a hierarchy — like a filing cabinet organized by environment and service. It's perfect for feature flags, config values, and secrets that don't need auto-rotation. Think of it as environment variables that live in the cloud.

Real Talk

AWS Systems Manager Parameter Store provides secure, hierarchical storage for configuration data and secrets management. It supports String, StringList, and SecureString (KMS-encrypted) types, organized in a path hierarchy. It's free for standard parameters, integrates with IAM, and supports parameter policies for expiration notifications.

Show Me The Code

# Store a parameter
aws ssm put-parameter \
  --name "/prod/app/database-url" \
  --value "postgresql://..." \
  --type SecureString

# Retrieve it
aws ssm get-parameter \
  --name "/prod/app/database-url" \
  --with-decryption

When You'll Hear This

"All our config lives in Parameter Store, organized by /env/service/key." / "Use Parameter Store for config, Secrets Manager for credentials that need rotation."