Creating a String parameter using the AWS CLI Creating a StringList parameter using the AWS CLI Creating a SecureString parameter using the AWS CLI Creating a multi-line parameter using the AWS CLI

Creating a Parameter Store parameter using the AWS CLI

You can use the AWS Command Line Interface (AWS CLI) to create String, StringList, and SecureString parameter types. After deleting a parameter, wait for at least 30 seconds to create a parameter with the same name.

Parameters can't be referenced or nested in the values of other parameters. You can't include {{}} or {{ssm:parameter-name}} in a parameter value.

Note

Parameters are only available in the AWS Region where they were created.

Topics

Creating a String parameter using the AWS CLI
Creating a StringList parameter using the AWS CLI
Creating a SecureString parameter using the AWS CLI
Creating a multi-line parameter using the AWS CLI

Creating a `String` parameter using the AWS CLI

Install and configure the AWS Command Line Interface (AWS CLI), if you haven't already.

For information, see Installing or updating the latest version of the AWS CLI.
Run the following command to create a String-type parameter. Replace each example resource placeholder with your own information.
Linux & macOS
```
aws ssm put-parameter \
    --name "parameter-name" \
    --value "parameter-value" \
    --type String \
    --tags "Key=tag-key,Value=tag-value"
```
Windows
```
aws ssm put-parameter ^
    --name "parameter-name" ^
    --value "parameter-value" ^
    --type String ^
    --tags "Key=tag-key,Value=tag-value"
```
-or-

Run the following command to create a parameter that contains an Amazon Machine Image (AMI) ID as the parameter value.
Linux & macOS
```
aws ssm put-parameter \
    --name "parameter-name" \
    --value "an-AMI-id" \
    --type String \
    --data-type "aws:ec2:image" \
    --tags "Key=tag-key,Value=tag-value"
```
Windows
```
aws ssm put-parameter ^
    --name "parameter-name" ^
    --value "an-AMI-id" ^
    --type String ^
    --data-type "aws:ec2:image" ^
    --tags "Key=tag-key,Value=tag-value"
```
The --name option supports hierarchies. For information about hierarchies, see Working with parameter hierarchies in Parameter Store.

The --data-type option must be specified only if you are creating a parameter that contains an AMI ID. It validates that the parameter value you enter is a properly formatted Amazon Elastic Compute Cloud (Amazon EC2) AMI ID. For all other parameters, the default data type is text and it's optional to specify a value. For more information, see Using native parameter support in Parameter Store for Amazon Machine Image IDs.

Important
If successful, the command returns the version number of the parameter. Exception: If you have specified aws:ec2:image as the data type, a new version number in the response doesn't mean that the parameter value has been validated yet. For more information, see Using native parameter support in Parameter Store for Amazon Machine Image IDs.

The following example adds two key-value pair tags to a parameter.
Linux & macOS
```
aws ssm put-parameter \
    --name parameter-name \
    --value "parameter-value" \
    --type "String" \
    --tags '[{"Key":"Region","Value":"East"},{"Key":"Environment", "Value":"Production"}]'
```
Windows
```
aws ssm put-parameter ^
    --name parameter-name ^
    --value "parameter-value" ^
    --type "String" ^
    --tags [{\"Key\":\"Region1\",\"Value\":\"East1\"},{\"Key\":\"Environment1\",\"Value\":\"Production1\"}]
```
The following example uses a parameter hierarchy in the name to create a plaintext String parameter. It returns the version number of the parameter. For more information about parameter hierarchies, see Working with parameter hierarchies in Parameter Store.
Linux & macOS
Parameter not in a hierarchy
```
aws ssm put-parameter \
    --name "golden-ami" \
    --type "String" \
    --value "ami-12345abcdeEXAMPLE"
```
Parameter in a hierarchy
```
aws ssm put-parameter \
    --name "/amis/linux/golden-ami" \
    --type "String" \
    --value "ami-12345abcdeEXAMPLE"
```
Windows
Parameter not in a hierarchy
```
aws ssm put-parameter ^
    --name "golden-ami" ^
    --type "String" ^
    --value "ami-12345abcdeEXAMPLE"
```
Parameter in a hierarchy
```
aws ssm put-parameter ^
    --name "/amis/windows/golden-ami" ^
    --type "String" ^
    --value "ami-12345abcdeEXAMPLE"
```

Run the following command to view the latest parameter value and verify the details of your new parameter.


aws ssm get-parameters --names "/Test/IAD/helloWorld"

The system returns information like the following.

{
    "InvalidParameters": [],
    "Parameters": [
        {            
            "Name": "/Test/IAD/helloWorld",
            "Type": "String",
            "Value": "My updated parameter value",
            "Version": 2,
            "LastModifiedDate": "2020-02-25T15:55:33.677000-08:00",
            "ARN": "arn:aws:ssm:us-east-2:123456789012:parameter/Test/IAD/helloWorld"            
        }
    ]
}

Run the following command to change the parameter value. It returns the version number of the parameter.


aws ssm put-parameter --name "/Test/IAD/helloWorld" --value "My updated 1st parameter" --type String --overwrite

Run the following command to view the parameter value history.


aws ssm get-parameter-history --name "/Test/IAD/helloWorld"

Run the following command to use this parameter in a command.


aws ssm send-command --document-name "AWS-RunShellScript" --parameters '{"commands":["echo {{ssm:/Test/IAD/helloWorld}}"]}' --targets "Key=instanceids,Values=instance-ids"

Run the following command if you only want to retrieve the parameter Value.


aws ssm get-parameter --name testDataTypeParameter --query "Parameter.Value"

Run the following command if you only want to retrieve the parameter Value using get-parameters.


aws ssm get-parameters --names "testDataTypeParameter" --query "Parameters[*].Value"

Run the following command to view the parameter metadata.


aws ssm describe-parameters --filters "Key=Name,Values=/Test/IAD/helloWorld"

Note

Name must be capitalized.

The system returns information like the following.

{
    "Parameters": [
        {
            "Name": "helloworld",
            "Type": "String",
            "LastModifiedUser": "arn:aws:iam::123456789012:user/JohnDoe",
            "LastModifiedDate": 1494529763.156,
            "Version": 1,
            "Tier": "Standard",
            "Policies": []           
        }
    ]
}

Creating a StringList parameter using the AWS CLI

Install and configure the AWS Command Line Interface (AWS CLI), if you haven't already.

For information, see Installing or updating the latest version of the AWS CLI.
Run the following command to create a parameter. Replace each example resource placeholder with your own information.
Linux & macOS
```
aws ssm put-parameter \
    --name "parameter-name" \
    --value "a-comma-separated-list-of-values" \
    --type StringList \
    --tags "Key=tag-key,Value=tag-value"
```
Windows
```
aws ssm put-parameter ^
    --name "parameter-name" ^
    --value "a-comma-separated-list-of-values" ^
    --type StringList ^
    --tags "Key=tag-key,Value=tag-value"
```
Note
If successful, the command returns the version number of the parameter.

This example adds two key-value pair tags to a parameter. (Depending on the operating system type on your local machine, run one of the following commands. The version to run from a local Windows machine includes the escape characters ("\") that you need to run the command from your command line tool.)

Here is a StringList example that uses a parameter hierarchy.
Linux & macOS
```
aws ssm put-parameter \
    --name /IAD/ERP/Oracle/addUsers \
    --value "Milana,Mariana,Mark,Miguel" \
    --type StringList
```
Windows
```
aws ssm put-parameter ^
    --name /IAD/ERP/Oracle/addUsers ^
    --value "Milana,Mariana,Mark,Miguel" ^
    --type StringList
```
Note
Items in a StringList must be separated by a comma (,). You can't use other punctuation or special characters to escape items in the list. If you have a parameter value that requires a comma, then use the String type.
Run the get-parameters command to verify the details of the parameter. For example:
```
aws ssm get-parameters --name "/IAD/ERP/Oracle/addUsers"
```

Creating a SecureString parameter using the AWS CLI

Use the following procedure to create a SecureString parameter. Replace each example resource placeholder with your own information.

Only the value of a SecureString parameter is encrypted. Parameter names, descriptions, and other properties aren't encrypted.

Important

Parameter Store only supports symmetric encryption KMS keys. You can't use an asymmetric encryption KMS key to encrypt your parameters. For help determining whether a KMS key is symmetric or asymmetric, see Identifying symmetric and asymmetric KMS keys in the AWS Key Management Service Developer Guide

Install and configure the AWS Command Line Interface (AWS CLI), if you haven't already.

For information, see Installing or updating the latest version of the AWS CLI.

Run one of the following commands to create a parameter that uses the SecureString data type.

Linux & macOS

Create a SecureString parameter using the default AWS managed key


aws ssm put-parameter \
    --name "parameter-name" \
    --value "parameter-value" \
    --type "SecureString"

Create a SecureString parameter that uses a customer managed key


aws ssm put-parameter \
    --name "parameter-name" \
    --value "a-parameter-value, for example merchant-739482" \
    --type "SecureString"
    --tags "Key=tag-key,Value=tag-value"

Create a SecureString parameter that uses a custom AWS KMS key


aws ssm put-parameter \
    --name "parameter-name" \
    --value "a-parameter-value, for example merchant-739482" \
    --type "SecureString" \
    --key-id "your-account-ID/the-custom-AWS KMS-key" \
    --tags "Key=tag-key,Value=tag-value"

Windows

Create a SecureString parameter using the default AWS managed key


aws ssm put-parameter ^
    --name "parameter-name" ^
    --value "parameter-value" ^
    --type "SecureString"

Create a SecureString parameter that uses a customer managed key


aws ssm put-parameter ^
    --name "parameter-name" ^
    --value "a-parameter-value, for example merchant-739482" ^
    --type "SecureString" ^
    --tags "Key=