Beginner LevelCloud Computing (AWS/GCP/Azure)
What is the difference between AWS Secrets Manager and Systems Manager Parameter Store?
❓ Interview Prompt: Compare AWS Secrets Manager (auto-rotation, cost per secret) vs SSM Parameter Store (hierarchical parameters, low cost).
Both AWS Secrets Manager and Systems Manager (SSM) Parameter Store store configuration values, but serve different use cases:
1. SSM Parameter Store:
•
Purpose: General hierarchical configuration management (e.g. '/config/app/db_port').
•
Cost: Standard parameters are FREE (up to 10,000 parameters).
•
Encryption: Supports SecureString parameters encrypted via KMS.
2. AWS Secrets Manager:
•
Purpose: Strictly for sensitive secrets (DB passwords, API keys, OAuth secrets).
•
Special Feature: Built-in Automatic Secret Rotation for RDS, Redshift, and DocumentDB using Lambda.
•
Cost: $0.40 per secret per month.
Code Implementation Example
typescript
import { SecretsManagerClient, GetSecretValueCommand } from '@aws-sdk/client-secrets-manager';
const client = new SecretsManagerClient({});
async function getDatabaseCredentials(): Promise<{ username: string; password: string }> {
const res = await client.send(new GetSecretValueCommand({ SecretId: 'production/rds/db-credentials' }));
return JSON.parse(res.SecretString!);
}💡Fetching database credentials from AWS Secrets Manager.
🎯 Interview Key Takeaway
Use SSM Parameter Store for free application configuration parameters; use Secrets Manager for automatic password rotation.
#Secrets Manager#Parameter Store#Config#Secrets#Beginner
Back to all Cloud Computing (AWS/GCP/Azure) Questions→