Do you know that CloudFormation and AWS CDK can't write an entry of type SecureString to AWS SSM Parameter Store? I had no idea when I wanted to put a generated password to it as part of my Cfn Stack. I recently wrote a Blog [1] about it. Today I also published a Lambda function, written in Python [2]. Usable as CloudFormation custom resource. Works well for my use-case.
[1] https://dominik.wombacher.cc/posts/aws-cloudformation-and-cdk-doesnt-support-aws-ssm-parameter-store-securestring.html
[2] https://git.sr.ht/~wombelix/cfn-custom-resource-aws-ssm-securestring
#aws #awscdk #cdk #cloudformation #cfn #lambda #securestring #python