How do I use AWS Parameter Store and Secrets Manager differently?

I learned that there are two ways AWS handles hidden values: AWS Systems Manager Parameter Store and AWS Secrets Manager.

What is the difference between these two, and how should they be used differently?For example:

Are there any differences in intended use or usage?
Are there any differences in performance?
Is there a big difference in what the API can do?
Are there any notable differences in collaboration with other AWS services?
Are there any significant differences in price?

I think it will be long if I write it in detail, so I would appreciate it if you could link the rest to the documents while telling me the characteristic parts.

aws

2022-09-30 21:50

1 Answers

I have read the Frequently Asked Questions in Systems Manager and their billing system documentation.

This is a rough understanding, but the differences that I thought seemed important were the following two points:

Standard type of Parameter Store is available at no additional charge
Secret Manger can rotate hidden values and consolidate databases.

Below is a quote from the document.

https://aws.amazon.com/jp/systems-manager/faq/

AWS Secret Manager is a service that centrally manages the lifecycle of secrets in organizations such as rotation, auditing, and access control.Secret Manager allows you to rotate secrets automatically, which helps you meet security and compliance requirements.Secret Manager can incorporate integrations into MySQL, PostgreSQL, and Amazon Aurora on Amazon RDS, which can be extended to other types of secrets by customizing Lambda functions.

The AWS Systems Manager parameter store has secure, hierarchical storage for configuration data management, including secrets.Database connection types, text, passwords and license codes are stored as parameter values for audit and access control.The stored value can be plain text or encrypted data.Values can be referenced by parameter-specific names.You can build generic configuration and automation scripts using System Manager parameters and use them across a variety of AWS services, including Amazon ECS and AWS CloudFormation.

https://aws.amazon.com/jp/systems-manager/pricing/

The AWS Systems Manager parameter store consists of standard and advanced parameters.Standard parameters are available at no additional charge.

https://aws.amazon.com/jp/secrets-manager/pricing/

The Secret Manager fee is based on the number of secrets to save and the number of API calls to use.

2022-09-30 21:50

If you have any answers or tips

Popular Tags

python x 4647

android x 1593

java x 1494

javascript x 1427

c x 927

c++ x 878

ruby-on-rails x 696

php x 692

python3 x 685

html x 656