AWS Systems Manager Parameter Store - charges for decryption

2

I use aws-sdk gem for my rails project to retrieve data from Parameter Store.

Aws documentation says that There is no charge from Parameter Store to create a SecureString parameter, but charges for use of AWS KMS encryption do apply - which I understand

To retrieve any parameters(string or secure string) I use the following code

Aws::SSM::Client.new(
      region: region
  ).get_parameter(
      name: parameter_id,
      with_decryption: true
  ).to_h

As you can see I pass with_decryption: true to get the parameter, regardless it is a secure string or not.

My doubt is does it charge me if I use with_decryption: true while retrieving string parameter?

Should I omit with_decryption: true when I retrieve a string parameter so that the AWS system manager does not use unnecessary decryption?

Or does the AWS system manager just skip with_decryption: true if the parameter is not a secure string?

已提問 3 年前檢視次數 634 次
1 個回答
2
已接受的答案

As always in AWS you are paying for API calls, not parameters. So here you will only pay for usage of KMS service.

Here you can find that for String and StringList this parameter is simply ignored.

So you can have it for all calls and the cost will not be affected :)

profile picture
MG
已回答 3 年前
profile picture
專家
已審閱 4 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南