SSM Parameter Store

Question 1

What is SSM Parameter Store?

Answer 1

It is a serverless, scalable, and durable service that offers secure storage for configuration and secrets and optional Seamless Encryption using KMS

Question 2

What are the main features offered by SSM Parameter Store?

Answer 2

• Version tracking of configurations / secrets
• Configuration management using path & IAM
• Notifications with CloudWatch Events
• Integration with CloudFormation

Question 3

How does work SSM Parameter Store hierarchy?

Answer 3

/my-department/
	my-app/
		dev/
			db-url
			db-password
		prod/
			db-url
			db-password
	other-app/
/other-department/
/aws/reference/secretsmanager/secret_ID_in_Secrets_Manager
/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-g

Question 4

What are the main differences between SSM Parameter Store standard and advanced parameter tiers?

Answer 4

Standard is free. Advanced can use Parameter policies and allows more parameters and bigger parameters as well.

Question 5

What are SSM Parameter Store policies?

Answer 5

• Allow to assign a TTL to a parameter (expiration date) to force updating or deleting sensitive data such as passwords
• Can assign multiple policies at a time

Question 6

Set 3 SSM Parameter Store policies examples?

Answer 6

1. Delete my parameter on a date
2. Notify me N days before my parameter expires
3. Notify me if my parameter has not changed after N days