A custom CloudFormation resource for managing SecureString parameters in AWS SSM. It addresses the limitation in AWS CloudFormation regarding the creation of SecureString
parameter types. See AWS Resource SSM Parameter.
- Limited to Node.js version 16, as later versions do not preload the
aws-sdk
module. - Fixed delete operation for SSM parameters.
- Appends a random string suffix to parameters.
- Enforce
SecureString
only parameter types. - The cfn-response module is preloaded only when using the ZipFile Lambda Code property, restricting the ability to install additional packages; this is the actual restriction blocking further Node.js upgrades.
infrastructure.yml
: Contains the definition of the custom resource.example.yml
: Showcases the usage of the custom resource.Makefile
: Contains command to deploy the CloudFormation stack.
Built upon the original work by glassechidna/ssmcfn;