glassechidna/ssmcfn

SSM Parameter Store custom resource for CloudFormation templates

SSM Parameter Store helper for CloudFormation templates

You know what's lame? CloudFormation not (yet) having support for storing values in Parameter Store. You know what's less lame? Lambda-backed custom resources so that we can polyfill this ourselves. Simply deploy cfn.yml into your AWS region and use like this:

AWSTemplateFormatVersion: "2010-09-09"
Parameters:
  SecretValue:
    Description: Sssh, it's a secret
    Type: String
    NoEcho: true
Resources:
  SecureParam:
    Type: Custom::CfnParamStore
    Properties:
      ServiceToken: !ImportValue CfnParamStore
      Type: SecureString
      Value: !Ref SecretValue
Outputs:
  ParamArn:
    Description: Arn of param in SSM param store
    Value: !GetAtt SecureParam.Arn

Note that neither CloudFormation, Lambda nor Parameter Store are global resources, so you will have to deploy the helper stack into each region that you wish to use this in.