AWS Systems Manager Parameter Store - charges for decryption

2

I use aws-sdk gem for my rails project to retrieve data from Parameter Store.

Aws documentation says that There is no charge from Parameter Store to create a SecureString parameter, but charges for use of AWS KMS encryption do apply - which I understand

To retrieve any parameters(string or secure string) I use the following code

Aws::SSM::Client.new(
      region: region
  ).get_parameter(
      name: parameter_id,
      with_decryption: true
  ).to_h

As you can see I pass with_decryption: true to get the parameter, regardless it is a secure string or not.

My doubt is does it charge me if I use with_decryption: true while retrieving string parameter?

Should I omit with_decryption: true when I retrieve a string parameter so that the AWS system manager does not use unnecessary decryption?

Or does the AWS system manager just skip with_decryption: true if the parameter is not a secure string?

已提问 3 年前638 查看次数
1 回答
2
已接受的回答

As always in AWS you are paying for API calls, not parameters. So here you will only pay for usage of KMS service.

Here you can find that for String and StringList this parameter is simply ignored.

So you can have it for all calls and the cost will not be affected :)

profile picture
MG
已回答 3 年前
profile picture
专家
已审核 4 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则