Parameter Store (part of Systems Manager) stores configuration data and secrets — connection strings, feature flags, passwords — that applications retrieve securely at runtime, with optional KMS encryption.
Parameter Store vs Secrets Manager
Both store secrets. Parameter Store is free for standard parameters and great for general configuration and simple secrets. Secrets Manager adds built-in automatic rotation (for a cost). Need config values or simple secrets cheaply? Parameter Store. Need automatic credential rotation? Secrets Manager.
Test yourself
An application needs to store non-rotating configuration values and a few simple secrets cheaply, retrieving them securely at runtime. Which service?
- AWS Secrets Manager
- SSM Parameter Store
- An environment variable in code
- An S3 bucket
👉 Click to reveal the answer & explanation
Correct answer: B. Parameter Store stores configuration and simple secrets (optionally KMS-encrypted) at no cost for standard parameters — ideal when rotation isn’t needed. Secrets Manager (A) costs more and is for rotation; hard-coded env vars (C) and S3 (D) aren’t secure secret stores.
Related topics
Systems Manager · AWS Secrets Manager · AWS KMS
Ready to pass your AWS exam?
Stop guessing whether you’re ready. Our full-length, exam-realistic practice exams put you through the exact question style you’ll face — with a detailed explanation behind every answer, so you learn why, not just what.
- ✓ 6 full-length practice exams
- ✓ A detailed explanation for every single question
- ✓ Realistic, scenario-based questions — not memory dumps
- ✓ Lifetime access, kept current for 2026