AWS systems-manager: Add note recommending AWS AppConfig for runtime config safety
Summary
Adds a Note pointing readers to AWS AppConfig for feature flags and runtime configuration, highlighting deployment safety features such as validation, gradual rollouts, automatic rollback on CloudWatch alarms, and local caching via the AppConfig Agent.
Security assessment
The added note is a cross-service recommendation about deployment safety (validation, rollback, caching) rather than a security control or vulnerability fix; it is operational guidance with only tangential security relevance.
Evidence
+For feature flags and configuration that changes at runtime, AWS AppConfig extends Parameter Store with several deployment safety features. These include validation before deployment (JSON Schema or Lambda), gradual rollouts, automatic rollback on a configured Amazon CloudWatch alarm, and local caching through the AWS AppConfig Agent. To learn more, see [What is AWS AppConfig?](https://docs.aws.amazon.com/appconfig/latest/userguide/what-is-appconfig.html)
Diff
diff --git a/systems-manager/latest/userguide/parameter-store-how-to-retrieve.md b/systems-manager/latest/userguide/parameter-store-how-to-retrieve.md index d5e50490c..f25c42433 100644 --- a//systems-manager/latest/userguide/parameter-store-how-to-retrieve.md +++ b//systems-manager/latest/userguide/parameter-store-how-to-retrieve.md @@ -285,0 +286,4 @@ After you create your first parameters, consider the following next steps: +###### Note + +For feature flags and configuration that changes at runtime, AWS AppConfig extends Parameter Store with several deployment safety features. These include validation before deployment (JSON Schema or Lambda), gradual rollouts, automatic rollback on a configured Amazon CloudWatch alarm, and local caching through the AWS AppConfig Agent. To learn more, see [What is AWS AppConfig?](https://docs.aws.amazon.com/appconfig/latest/userguide/what-is-appconfig.html) +