The Importance of Parameter Management in Cybersecurity and Application Security

ACM.430 Architecting a secure parameter management system

Teri Radichel
Cloud Security
Published in
14 min readJan 12, 2024

--

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Part of my series on Automating Cybersecurity Metrics. The Code.

🔒 Related Stories: AWS Security | Application Security | Abstraction

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In the last post I altered my code to use parameters from AWS SSM Parameter store if a parameter matching the script name exists:

I manually added the parameter to AWS SSM Parameter in that post. In this post, I want to think through the architecture and requirements for automating parameter deployment.

A value-based approach to security

This post hearkens all the way back to a post I wrote at the very beginning of this series on value-based security.

--

--

Teri Radichel
Cloud Security

CEO 2nd Sight Lab | Penetration Testing & Assessments | AWS Hero | Masters of Infosec & Software Engineering | GSE 240 etc | IANS | SANS Difference Makers Award