AWS Certified CloudOps Engineer - Associate
Parameter Store for Configuration
Centralize configuration in Parameter Store: the three parameter types and SecureString encryption, hierarchies and the IAM path trap, the standard and advanced tiers, parameter policies, versions and labels, the 40 TPS throughput ceiling that breaks scale-out events, public parameters, CloudFormation dynamic references, and where Secrets Manager takes over.
Intermediate 28 minutes 8 Learning Objectives
- Choose between String, StringList, and SecureString, and describe exactly what SecureString encrypts
- Design a parameter hierarchy within the naming constraints, and explain why an explicit IAM deny on a child path can be bypassed
- Compare the standard and advanced tiers and identify which decisions are irreversible
- Apply Expiration, ExpirationNotification, and NoChangeNotification policies, and avoid the overwrite trap
- Predict the behavior of parameter versions and labels at their limits
- Diagnose a ThrottlingException during a scale-out event and choose between reducing calls and enabling higher throughput
- Reference parameters from CloudFormation with the ssm and ssm-secure dynamic reference patterns
- Decide when a workload needs Secrets Manager instead of Parameter Store