

# AWS Systems Manager Parameter Store
<a name="aws-systems-manager-parameter-store"></a>

Automated Security Response on AWS uses AWS Systems Manager Parameter Store for storage of operational data. The following parameters are stored in Parameter Store:


| Name | Value | Use | 
| --- | --- | --- | 
|  `/Solutions/SO0111/CMK_REMEDIATION_ARN`  | AWS KMS key that will encrypt data for FSBP remediations | Encryption of customer data, such as CloudTrail logs, as part of remediations | 
|  `/Solutions/SO0111/CMK_ARN`  | AWS KMS key that ASR will use to encrypt data | Encryption of solution data | 
|  `/Solutions/SO0111/SNS_Topic_ARN`  | ARN of the Amazon SNS topic for the solution | Notification of remediation events | 
|  `/Solutions/SO0111/SNS_Topic_Config.1`  | SNS topic for AWS Config updates | Config.1 remediation | 
|  `/Solutions/SO0111/version`  | Solution version |  | 
|  `/Solutions/SO0111`/{{<security standard long name>}}/{{<version>}}/status |  `enabled`  | Indicates whether the standard is active in the solution. A standard can be disabled for automated remediation by changing this to `disabled`  | 
|  `/Solutions/SO0111`/{{<security standard long name>}}/shortname |  `String`  | Short name for the security standard. For example: `CIS`, `AFSBP`, `PCI`  | 
|  `/Solutions/SO0111`/{{<security standard long name>}}/{{<version>}}/{{<control>}}/remap |  `String`  | When one control uses the same remediation as another, these parameters accomplish the remap | 
|  `/ASR/Filters/AccountFilterMode`  | Include, Exclude, or Disabled | Controls the Account ID filtering behavior for fully automated remediations | 
|  `/ASR/Filters/AccountFilters`  | Comma-delimited list of AWS Account IDs | List of AWS Account IDs for which the solution should filter automated remediations. | 
|  `/ASR/Filters/OUFilterMode`  | Include, Exclude, or Disabled | Controls the Organizational Units (OUs) filtering behavior for fully automated remediations | 
|  `/ASR/Filters/OUFilters`  | Comma-delimited list of Organization Unit Ids | List of OUs for which the solution should filter automated remediations. | 
|  `/ASR/Filters/TagFilterMode`  | Include, Exclude, or Disabled | Controls the Resource Tag filtering behavior for fully automated remediations | 
|  `/ASR/Filters/TagFilters`  | Comma-delimited list of Resource Tag Keys | List of Resource Tag Keys for which the solution should filter automated remediations. | 