Parameter store provides a centralized, encrypted store for sensitive information you use in administrative tasks to manage your instances and operating systems. You can store information such as OS login passwords and query strings. With Parameter store, your information stays within your environment, saving you the manual overhead of storing and managing it in configuration files. Parameters can be easily referenced by other EC2 Systems Manager capabilities such as Run Command, allowing you to perform configuration changes securely at scale.

Through integration with AWS Identity and Access Management, you can provide access control to specific parameters, letting you provide access to the data only to the users who need them and on which resources they can be used. AWS Key Management Service (KMS) integration helps you encrypt your sensitive information and protect the security of your keys. Additionally, all calls to the parameter store are recorded with AWS CloudTrail so that they can be audited.

Amazon EC2 Systems Manager is now generally available

Try Amazon EC2 Systems Manager for Free

Parameter Store provides a central repository for all your administrative information, and can be easily referenced when you run tasks using Run Command, State Manager, or Automation without having to rely on manual processes such as storing in data files or typing in plain text.

Parameter Store provides encryption for sensitive information that needs to be stored and referenced in a secure manner. You can encrypt this data with AWS Key Management Service (KMS) keys or with a default service key. Through integration with AWS IAM, you can delegate permissions to those who can decrypt and view this information.