Do you know that CloudFormation and AWS CDK can't write an entry of type SecureString to AWS SSM Parameter Store? I had no idea when I wanted to put a generated password to it as part of my Cfn Stack. I recently wrote a Blog [1] about it. Today I also published a Lambda function, written in Python [2]. Usable as CloudFormation custom resource. Works well for my use-case.

[1] https://dominik.wombacher.cc/posts/aws-cloudformation-and-cdk-doesnt-support-aws-ssm-parameter-store-securestring.html
[2] https://git.sr.ht/~wombelix/cfn-custom-resource-aws-ssm-securestring

#aws #awscdk #cdk #cloudformation #cfn #lambda #securestring #python

The Wombelix Post - AWS CloudFormation and CDK doesn't support AWS SSM Parameter Store SecureString?!

AWS SSM Parameter Store SecureString type not usable with CloudFormation and AWS CDK

Create Functions to Create SecureString SSM Parameter
~~
ACM.224 Creating a SecureString Parameter with the AWS CLI
~~
by Teri Radichel | May 27, 2023
#aws #securestring #parameter #cloud #data #security

https://medium.com/cloud-security/create-functions-to-create-securestring-ssm-parameter-802b418e4bfa