title: AWS SSM Parameter Store with CloudFormation
body: <p>From the CFN docs I can see that I can create an <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ssm-parameter.html" rel="nofollow noreferrer">AWS::SSM::Parameter</a>.  I also see how I can create a <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html" rel="nofollow noreferrer">KMS Master Key</a>.</p>
  
  <p>However the <code>type</code> parameter on the <code>SSM:Parameter</code> in the doc page does not list the <code>secure string</code> type.  </p>
  
  <p>Is there a way that I can do the following in a cloudformation template:</p>
  
  <pre><code>1) create KMS Key
  2) use KMS key to encrypt a param
  3) pull that param in User-Data for an EC2 instance
  </code></pre>
  
  <p>I will be running the CFN template from a Jenkins job with the value of the param in a jenkins password parameter.  I can also set <code>"NoEcho": true</code> on the template's parameter so it's not echoed in the CloudFormation console.</p>