Skip to content

A custom CloudFormation resource for managing SecureString parameters in AWS SSM.

Notifications You must be signed in to change notification settings

rdok/aws-secure-ssm-parameter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 
 
 
 
 

Repository files navigation

aws-ssm-secure-parameter

A custom CloudFormation resource for managing SecureString parameters in AWS SSM. It addresses the limitation in AWS CloudFormation regarding the creation of SecureString parameter types. See AWS Resource SSM Parameter.

Features

  • Limited to Node.js version 16, as later versions do not preload the aws-sdk module.
  • Fixed delete operation for SSM parameters.
  • Appends a random string suffix to parameters.
  • Enforce SecureString only parameter types.
  • The cfn-response module is preloaded only when using the ZipFile Lambda Code property, restricting the ability to install additional packages; this is the actual restriction blocking further Node.js upgrades.

File Structure

  • infrastructure.yml: Contains the definition of the custom resource.
  • example.yml: Showcases the usage of the custom resource.
  • Makefile: Contains command to deploy the CloudFormation stack.

Credits

Built upon the original work by glassechidna/ssmcfn;

Resources