DJames617 Service Comparison
Secrets Manager vs Parameter Store
Both store configuration values, but rotation and secret lifecycle are the split.
What They Have in Common
Each option can solve part of the scenario. The exam expects you to choose the one that satisfies the stated constraints with the right operational burden, security boundary, availability model, and cost behavior.
Key Differences
| Option | Primary model | Best use | Security | Availability | Operations and cost |
|---|---|---|---|---|---|
| Secrets Manager | Secrets with rotation | Database credentials, API keys needing rotation | Secret resource policies, KMS, rotation Lambda | Managed regional service; replicate when required | Per secret and API calls; built-in rotation workflow |
| SSM Parameter Store | Configuration and parameters | App config, non-rotating values, hierarchy | IAM path policies, SecureString with KMS | Managed regional service; standard parameters are durable | Lower cost; manage hierarchy, versioning, and rotation needs |
Typical Exam Clues
Practice After Studying
Return to the certification guide that includes this comparison and launch domain training from there.