Ravi Sir's Cards › AWS
Secrets Manager vs SSM
This revision card explains Secrets Manager vs SSM. It starts from the need that teams mix Parameter Store and Secrets Manager without a rule. It describes SSM Parameter Store (SecureString) is fine for config; Secrets Manager adds rotation and richer secret lifecycle. The how-to section covers how to use Secrets Manager for DB/API credentials that must rotate; SSM for non-rotating app config. An example on the card is stripe API key with rotation , then Secrets Manager; FEATURE_X=true , then SSM String.
Read card text
What this card says
Why do we need it?
Teams mix Parameter Store and Secrets Manager without a rule.
What is it?
SSM Parameter Store (SecureString) is fine for config; Secrets Manager adds rotation and richer secret lifecycle.
rotation
How to do it
Use Secrets Manager for DB/API credentials that must rotate; SSM for non-rotating app config.
Example
Stripe API key with rotation → Secrets Manager; FEATURE_X=true → SSM String.