AWS CLI

SSM Commands

Systems Manager

4 commands

Commands

$ aws ssm get-parameter --name /app/database/password --with-decryption --query Parameter.Value --output text

Retrieve parameter value with KMS decryption.

$ aws ssm put-parameter --name /app/api/key --value "secret-value" --type SecureString --key-id alias/aws/ssm --overwrite

Store encrypted parameter with KMS.

$ aws ssm get-parameters-by-path --path /app/config/ --recursive --with-decryption --query 'Parameters[*].[Name,Value]' --output table

Retrieve all parameters under a path hierarchy.

$ aws ssm delete-parameter --name /app/deprecated/old-key

Remove parameter from Parameter Store.