Secrets Manager vs SSM Parameter Store.

In Simple Words:

• SSM Parameter Store: Lightweight hierarchical storage for app configuration and simple encrypted secrets. Cost-effective (free standard tier).
• Secrets Manager: Built specifically for critical credentials; features native automatic password rotation for RDS and database credentials.

import { SecretsManagerClient, GetSecretValueCommand } from "@aws-sdk/client-secrets-manager";

const client = new SecretsManagerClient({});
const secret = await client.send(new GetSecretValueCommand({ SecretId: "prod/db/credentials" }));
const credentials = JSON.parse(secret.SecretString!);