Secrets Manager versus Parameter Store
Learn how Secrets Manager differs from Parameter Store.
| Secrets Manager | Parameter Store | |
|---|---|---|
| Pricing | $0.40 / month & $0.05 / 10,000 API calls | free |
| Retrivals per second | 5,000 | 0 (or 3,000) |
| Versions & Labels | ✅ Yes | ✅ Yes |
| Resource-based IAM policy | ✅ Yes | ❌ No (workaround: KMS CMK key policy) |
| Deletion protection | Schedule for deletion | ❌ No |
| Secret Rotation | Lambda templates | ❌ No |
| Multi-Region replication | ✅ Yes | ❌ No |
| Payload limit | ~65KB | 4KB (or 8KB) |
| ABAC (tag-based) | ✅ Yes | ✅ Yes |
| Auditing (CloudTrail) | ✅ Yes | ✅ Yes |
| EventBridge integration | ❌ No | ✅ Yes |
| Lifecycle policies | ❌ No | ✅ Yes |
| CloudFormation usage | ✅ Yes | ✅ Yes |
| Terraform usage | secret is leaked in the state file | secret is leaked in the state file |