Add query support for AWS::SSM::Parameter

[iainelder]

I have a parameter that is deployed across all accounts in my organization.

The parameter has been configured differently in some accounts. I want to check how the configuration varies across the organization.

Specifically I want to check which parameters with a given name across the organization are using standard-tier v advanced-tier.

So I was surprised to discover today that AWS Config does not yet support SSM Parameters at all.

I expected a query like this to give me a summary of one type versus the other.

SELECT
  configuration.tier,
  COUNT(*)
WHERE
  resourceType = 'AWS::SSM::Parameter'
  AND resourceName = '/my/org/wide/param'
GROUP BY
  configuration.tier
;

With a result like this:

configuration.tier	COUNT(*)
Standard	1111
Advanced	2222

[clustermaster99]

I second this!
Looking for the same to validate proper log group usage for Systems Manager

[matthew-mattoon]

I too would like this, especially to confirm Secure-String.