Secrets Manager versus Parameter Store

17 Oct 2021

Learn how Secrets Manager differs from Parameter Store.

Secrets Manager Parameter Store
Pricing

$0.40 / month & $0.05 / 10,000 API calls

free

Retrivals per second

5,000

0 (or 3,000)

Versions & Labels

✅ Yes

✅ Yes

Resource-based IAM policy

✅ Yes

❌ No (workaround: KMS CMK key policy)

Deletion protection

Schedule for deletion

❌ No

Secret Rotation

Lambda templates

❌ No

Multi-Region replication

✅ Yes

❌ No

Payload limit

~65KB

4KB (or 8KB)

ABAC (tag-based)

✅ Yes

✅ Yes

Auditing (CloudTrail)

✅ Yes

✅ Yes

EventBridge integration

❌ No

✅ Yes

Lifecycle policies

❌ No

✅ Yes

CloudFormation usage

✅ Yes

✅ Yes

Terraform usage

secret is leaked in the state file

secret is leaked in the state file