{"id":12137,"date":"2026-10-25T14:57:51","date_gmt":"2026-10-25T05:57:51","guid":{"rendered":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=12137"},"modified":"2026-10-29T15:59:46","modified_gmt":"2026-10-29T06:59:46","slug":"aws-systems-managerssm-parameter-store-%ec%9e%90%ec%b2%b4-%ec%84%9c%eb%b2%84%ec%97%90%ec%84%9c-%ec%a0%91%ea%b7%bc%ed%95%98%ea%b8%b0","status":"publish","type":"post","link":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=12137","title":{"rendered":"AWS Systems Manager(SSM) Parameter Store – \uc790\uccb4 \uc11c\ubc84\uc5d0\uc11c \uc811\uadfc\ud558\uae30"},"content":{"rendered":"

AWS Systems Manager(SSM) Parameter Store – \uc790\uccb4 \uc11c\ubc84\uc5d0\uc11c \uc811\uadfc\ud558\uae30<\/h1>\n

IAM \uc0ac\uc6a9\uc790\uc640 \uad8c\ud55c \uc900\ube44 (AWS \ucf58\uc194)<\/h2>\n

\uac1c\ubc1c\uc790\uc6a9 IAM \uc0ac\uc6a9\uc790\ub97c \ub9cc\ub4e4\uace0, \uacbd\ub85c\ub97c \uc81c\ud55c\ud55c \uc815\ucc45\uc744 \ubd99\uc785\ub2c8\ub2e4.<\/p>\n

<\uacc4\uc815ID>:parameter\/myapp\/* \ubd80\ubd84\uc740 \uc218\uc815\ud574 \uc8fc\uc5b4\uc57c \ud569\ub2c8\ub2e4.<\/p>\n

\uadf8\ub2e4\uc74c IAM \u2192 \uc0ac\uc6a9\uc790 \u2192 \ubcf4\uc548 \uc790\uaca9 \uc99d\uba85\uc5d0\uc11c \uc561\uc138\uc2a4 \ud0a4\ub97c \ubc1c\uae09\ud569\ub2c8\ub2e4.<\/p>\n

{\n  "Version": "2012-10-17",\n  "Statement": [\n    {\n      "Effect": "Allow",\n      "Action": [\n        "ssm:GetParameter",\n        "ssm:GetParameters",\n        "ssm:GetParametersByPath",\n        "ssm:PutParameter",\n        "ssm:DeleteParameter",\n        "ssm:AddTagsToResource"\n      ],\n      "Resource": "arn:aws:ssm:ap-northeast-2:<\uacc4\uc815ID>:parameter\/myapp\/*"\n    },\n    {\n      "Effect": "Allow",\n      "Action": "ssm:DescribeParameters",\n      "Resource": "*"\n    }\n  ]\n}<\/code><\/pre>\n
AWS CLI v2 \uc124\uce58<\/h2>\n
aws --version<\/code><\/pre>\n
\uc790\uaca9 \uc99d\uba85 \ub4f1\ub85d (\ud2b9\uc815 \ud504\ub85c\ud30c\uc77c)<\/h2>\n
aws configure --profile myapp-dev\n# AWS Access Key ID:     AKIA...\n# AWS Secret Access Key: ****\n# Default region name:   ap-northeast-2\n# Default output format: json<\/code><\/pre>\n
\ub3d9\uc791 \ud655\uc778 (\ud2b9\uc815 \ud504\ub85c\ud30c\uc77c)<\/h2>\n
# \uc4f0\uae30\naws ssm put-parameter --name "\/myapp\/dev\/db.password" --value "secret123" --type SecureString --overwrite --profile myapp-dev\n\n# \uc77d\uae30\naws ssm get-parameter --name "\/myapp\/dev\/db.password" --with-decryption --profile myapp-dev\n\n# \uacbd\ub85c \ub2e8\uc704\ub85c \uc77d\uae30\naws ssm get-parameters-by-path --path "\/myapp\/dev" --recursive --with-decryption --profile myapp-dev<\/code><\/pre>\n
\uc790\uaca9 \uc99d\uba85 \ub4f1\ub85d (\ub514\ud3f4\ud2b8)<\/h2>\n
aws configure\n# AWS Access Key ID:     AKIA...\n# AWS Secret Access Key: ****\n# Default region name:   ap-northeast-2\n# Default output format: json<\/code><\/pre>\n
\ub3d9\uc791 \ud655\uc778 (\ub514\ud3f4\ud2b8)<\/h2>\n
# \uc4f0\uae30\naws ssm put-parameter --name "\/myapp\/dev\/db.password" --value "secret123" --type SecureString --overwrite\n\n# \uc77d\uae30\naws ssm get-parameter --name "\/myapp\/dev\/db.password" --with-decryption\n\n# \uacbd\ub85c \ub2e8\uc704\ub85c \uc77d\uae30\naws ssm get-parameters-by-path --path "\/myapp\/dev" --recursive --with-decryption<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
AWS Systems Manager(SSM) Parameter Store – \uc790\uccb4 \uc11c\ubc84\uc5d0\uc11c \uc811\uadfc\ud558\uae30 IAM \uc0ac\uc6a9\uc790\uc640 \uad8c\ud55c \uc900\ube44 (AWS \ucf58\uc194) \uac1c\ubc1c\uc790\uc6a9 IAM \uc0ac\uc6a9\uc790\ub97c \ub9cc\ub4e4\uace0, \uacbd\ub85c\ub97c \uc81c\ud55c\ud55c \uc815\ucc45\uc744 \ubd99\uc785\ub2c8\ub2e4. <\uacc4\uc815ID>:parameter\/myapp\/* \ubd80\ubd84\uc740 \uc218\uc815\ud574 \uc8fc\uc5b4\uc57c \ud569\ub2c8\ub2e4. \uadf8\ub2e4\uc74c IAM \u2192 \uc0ac\uc6a9\uc790 \u2192 \ubcf4\uc548 \uc790\uaca9 \uc99d\uba85\uc5d0\uc11c \uc561\uc138\uc2a4 \ud0a4\ub97c \ubc1c\uae09\ud569\ub2c8\ub2e4. { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "ssm:GetParameter", "ssm:GetParameters", "ssm:GetParametersByPath", "ssm:PutParameter", "ssm:DeleteParameter", "ssm:AddTagsToResource"\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-12137","post","type-post","status-publish","format-standard","hentry","category-devops"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/12137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12137"}],"version-history":[{"count":2,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/12137\/revisions"}],"predecessor-version":[{"id":12142,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/12137\/revisions\/12142"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}