SSM Parameter Store
Protocol: JSON 1.1 (X-Amz-Target: AmazonSSM.*)
Endpoint: POST http://localhost:4566/
Supported Actions
| Action | Description |
|---|---|
PutParameter |
Create or update a parameter |
GetParameter |
Get a single parameter by name |
GetParameters |
Get multiple parameters by name |
GetParametersByPath |
Get all parameters under a path prefix |
DeleteParameter |
Delete a parameter |
DeleteParameters |
Delete multiple parameters |
GetParameterHistory |
List all versions of a parameter |
DescribeParameters |
List parameters with optional filters |
LabelParameterVersion |
Attach a label to a specific version |
AddTagsToResource |
Tag a parameter |
ListTagsForResource |
List tags on a parameter |
RemoveTagsFromResource |
Remove tags from a parameter |
Configuration
floci:
services:
ssm:
enabled: true
max-parameter-history: 5 # Versions retained per parameter
storage:
services:
ssm:
mode: memory
flush-interval-ms: 5000
Examples
export AWS_ENDPOINT=http://localhost:4566
# Store parameters
aws ssm put-parameter --endpoint-url $AWS_ENDPOINT \
--name /app/db/host --value "localhost" --type String
aws ssm put-parameter --endpoint-url $AWS_ENDPOINT \
--name /app/db/password --value "secret" --type SecureString
# Retrieve
aws ssm get-parameter --endpoint-url $AWS_ENDPOINT \
--name /app/db/host
aws ssm get-parameters-by-path --endpoint-url $AWS_ENDPOINT \
--path /app/ --recursive
# Delete
aws ssm delete-parameter --endpoint-url $AWS_ENDPOINT \
--name /app/db/host
Parameter Types
All AWS parameter types are accepted: String, StringList, SecureString.
Note
SecureString parameters are stored as-is without actual KMS encryption in Floci. The type is preserved and returned correctly, but the value is not encrypted at rest.