Service Comparison

Secrets Manager vs Parameter Store

Both store configuration values, but rotation and secret lifecycle are the split.

What They Have in Common

Each option can solve part of the scenario. The exam expects you to choose the one that satisfies the stated constraints with the right operational burden, security boundary, availability model, and cost behavior.

Key Differences

Option	Primary model	Best use	Security	Availability	Operations and cost
Secrets Manager	Secrets with rotation	Database credentials, API keys needing rotation	Secret resource policies, KMS, rotation Lambda	Per secret and API calls
SSM Parameter Store	Configuration and parameters	App config, non-rotating values, hierarchy	IAM path policies, SecureString with KMS	Standard parameters are low cost

Typical Exam Clues

Practice After Studying

Return to the certification guide that includes this comparison and launch domain training from there.

Sources and Review Metadata

AWS service documentation https://docs.aws.amazon.com/ Reviewed 2026-08-07

AWS Well-Architected Framework https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html Reviewed 2026-08-07

This independent training application is not affiliated with or endorsed by Amazon Web Services. AWS, Amazon Web Services, and AWS certification names are trademarks of Amazon.com, Inc. or its affiliates.