Create a dedicated AWS IAM user

• From AWS console, go to IAM > Users.
• Click 'Add User'.
• Enter your yourname (seecret-keeper-user in this example). From access type, check only on "Programmatic access". Click "Next: Permissions".
• Click "Attach existing policies directly" and click "Create policy"
  • From "Service", find "SSM" and select it.
  • From "Actions", browse to "Read" > "GetParameter" and check on it.
  • From "Resources", check on "parameter".
  • Click "Review policy".
• Name your policy as SSMReadParameterPolicy and write descriptions. Click "Create policy".
• Go back to "Set permissions" page. Find the SSMReadParameterPolicy policy that you just created, and check on it.
• Click "Next: Review"
• Review your choices and click "Create user".
• You will be shown the new user's access key ID and secret access key. Don't forget to write down the secret key. You will never see it again.