awssecuritycost-optimizationsecrets

SSM Parameter Store cost explained: free standard vs paid advanced

SSM Parameter Store standard parameters are free, while advanced parameters cost $0.05 each per month and higher-throughput API calls carry a fee. Knowing when you actually need advanced tier saves money over Secrets Manager. Here is the pricing.

The C3X Team··5 min read

Quick answer

SSM Parameter Store standard parameters are free: no per-parameter charge, up to 10,000 per account, with standard-throughput API calls included at no cost. Advanced parameters cost $0.05 each per month and support larger values (up to 8 KB versus 4 KB), more parameters, and parameter policies. Higher-throughput API interactions cost about $0.05 per 10,000 calls when you exceed the standard rate. For most configuration and many secrets, the free standard tier is enough, making Parameter Store far cheaper than Secrets Manager's $0.40 per secret per month. The rule: use free standard parameters by default and reserve advanced tier for the specific cases that need it.

SSM Parameter Store is AWS's service for storing configuration data and secrets, and its headline feature for cost is that the standard tier is free. That makes it a much cheaper home for secrets than Secrets Manager for many use cases. But it has an advanced tier and a throughput charge that can appear if you are not careful, so knowing where the free tier ends is worth the few minutes.

Standard versus advanced

FactorStandardAdvanced
Per-parameter costFree$0.05/month each
Max value size4 KB8 KB
Parameters per accountUp to 10,000Up to 100,000
Parameter policiesNot availableAvailable (expiration, notifications)

Standard parameters cost nothing, allow up to 10,000 per account, hold values up to 4 KB, and include standard-throughput API access at no charge. Advanced parameters cost $0.05 per parameter per month, raise the value size limit to 8 KB, allow up to 100,000 parameters, and add parameter policies like automatic expiration and change notifications.

The throughput charge

Both tiers offer a higher-throughput API option for applications that need to read parameters at high rates. Standard-throughput API interactions are free, but if you enable higher throughput, API calls cost about $0.05 per 10,000 interactions. For most applications reading configuration at startup or occasionally, the free standard throughput is plenty, and the charge only appears for high-frequency parameter reads. Caching parameter values in your application rather than reading them on every request keeps you in the free tier.

The Secrets Manager comparison

The reason Parameter Store cost matters is the comparison to Secrets Manager, which charges $0.40 per secret per month plus API fees. For a team with hundreds of secrets that do not need Secrets Manager's automatic rotation, storing them as free standard Parameter Store SecureString parameters instead of Secrets Manager secrets saves the entire $0.40 per secret. Two hundred secrets is $80 a month in Secrets Manager versus free in standard Parameter Store, as theSecrets Manager versus Parameter Storecomparison details. Parameter Store SecureStrings are encrypted with KMS, so you get encryption without the per-secret fee.

Choosing the right tier

Default to standard parameters, which cover configuration and most secrets for free. Use advanced parameters only when you specifically need values larger than 4 KB, more than 10,000 parameters, or parameter policies like expiration. Keep API access at standard throughput and cache values in your application to avoid the higher-throughput charge. And choose Parameter Store over Secrets Manager wherever you do not need Secrets Manager's built-in rotation, since the free tier removes the per-secret cost entirely.

Because the cost turns on which tier and throughput you choose, both decided up front, the estimate is straightforward. Price your parameter and secret storage against theresource catalog so you use the free tier where it fits and reserve paid tiers for the cases that genuinely need them.

FAQ

Is SSM Parameter Store free?

The standard tier is free: no per-parameter charge, up to 10,000 parameters per account, with standard-throughput API calls included at no cost. Advanced parameters cost $0.05 each per month for larger values, more parameters, and parameter policies. Higher-throughput API interactions cost about $0.05 per 10,000 calls when enabled. For most configuration and many secrets, the free standard tier is sufficient.

What is the difference between standard and advanced parameters?

Standard parameters are free, hold values up to 4 KB, allow up to 10,000 per account, and lack parameter policies. Advanced parameters cost $0.05 each per month, hold values up to 8 KB, allow up to 100,000 per account, and support parameter policies like automatic expiration and change notifications. Use advanced only when you specifically need the larger size, higher count, or policies.

Is Parameter Store cheaper than Secrets Manager?

Usually yes for storing secrets, because standard Parameter Store SecureString parameters are free while Secrets Manager charges $0.40 per secret per month. Two hundred secrets is $80 a month in Secrets Manager versus free in standard Parameter Store. Parameter Store SecureStrings are KMS-encrypted, so you get encryption without the per-secret fee. Secrets Manager is worth its cost mainly when you need its built-in automatic rotation.

When do I pay for Parameter Store API calls?

Only when you enable the higher-throughput API option for applications that read parameters at high rates, which costs about $0.05 per 10,000 interactions. Standard-throughput API access is free and sufficient for most applications that read parameters at startup or occasionally. Caching parameter values in your application rather than reading them on every request keeps you in the free standard throughput.

When should I use advanced parameters?

Only when you specifically need values larger than 4 KB, more than 10,000 parameters per account, or parameter policies such as automatic expiration and change notifications. For everything else, standard parameters are free and sufficient. Defaulting to standard and reserving advanced for the specific cases that require it avoids the $0.05 per parameter monthly charge on parameters that do not need advanced features.

How does C3X help with Parameter Store cost?

C3X prices your SSM Parameter Store and Secrets Manager usage from Terraform before you deploy, so the choice between free standard parameters, paid advanced parameters, and Secrets Manager secrets is visible in the pull request. That helps you default to the free tier, reserve advanced parameters for cases that need them, and choose Parameter Store over Secrets Manager where rotation is not required, at design time.

What to do next

Price your secret and config storage before you deploy. C3X reads your Terraform and prices your resources against a live catalog. Start with the quickstart.

Try C3X on your own Terraform

Free and open source. No API key required. One command to install, one command to estimate.