Secrets Manager versus Parameter Store
Learn how Secrets Manager differs from Parameter Store.
| Secrets Manager | Parameter Store | |
|---|---|---|
| Pricing | $0.40 / month & $0.05 / 10,000 API calls |
free |
| Retrivals per second | 5,000 |
0 (or 3,000) |
| Versions & Labels | ✅ Yes |
✅ Yes |
| Resource-based IAM policy | ✅ Yes |
❌ No (workaround: KMS CMK key policy) |
| Deletion protection | Schedule for deletion |
❌ No |
| Secret Rotation | Lambda templates |
❌ No |
| Multi-Region replication | ✅ Yes |
❌ No |
| Payload limit | ~65KB |
4KB (or 8KB) |
| ABAC (tag-based) | ✅ Yes |
✅ Yes |
| Auditing (CloudTrail) | ✅ Yes |
✅ Yes |
| EventBridge integration | ❌ No |
✅ Yes |
| Lifecycle policies | ❌ No |
✅ Yes |
| CloudFormation usage | ✅ Yes |
✅ Yes |
| Terraform usage | secret is leaked in the state file |
secret is leaked in the state file |