Overview

SopsStringParameter — Sops to single SSM ParameterStore Parameter

const parameter = new SopsStringParameter(stack, 'MySopsParameter', {
  encryptionKey: Key.fromLookup(stack, 'DefaultKey', {
    aliasName: 'alias/aws/ssm',
  }),
  sopsFilePath: 'secrets/sopsfile-encrypted-secret.json',
});

This creates a Parameter holding the decrypted SOPS file content. No transformations are applied.

Need the content split into many separate parameters instead? See MultiStringParameter.