CODEWITHSUNDEEP
amazon-web-servicesaws-sdkaws-cliamazon-kmsaws-ssm
Harts
Harts

Reputation: 4103

AWS SSM Parameters Store

Is there anyway to just nuke / remove all items in AWS Parameters Store?

All the command line I found are to remove it either one by one or remove it given a list of names.

I also tried using 

aws ssm delete-parameters --cli-input-json test.json

with test.json file looks like this

{
    "Names": [
        "test1",
        "test2"
    ]
}

still does not work..

Ideally if I can use --query and use it as is, that'd be great.

I'm using --query like so

aws ssm get-parameters-by-path --path / --max-items 2 --query 'Parameters[*].[Name]'

Upvotes: 2

Views: 6280

Answers (5)

Ricky Boy
Ricky Boy

Reputation: 783

Adding to the above. I had to delete around 400 params from the parameter store. Ran the below in command line and it did it! (Change 45 in for loop to whatever number you like);

for ((n=0;n<**45**;n++)); do
    aws ssm delete-parameters --names `aws ssm get-parameters-by-path --path / --recursive --query Parameters[].Name --output text --max-items 9`
done

Upvotes: 2

Subas
Subas

Reputation: 11

try this and execute multiple times

aws ssm delete-parameters --names `aws ssm get-parameters-by-path --path / --recursive --query Parameters[].Name --output text --max-items 9`

Upvotes: 1

bormansquirrel
bormansquirrel

Reputation: 95

This is my one line solution for this:

$ for key in $(aws ssm get-parameters-by-path --path "/" --recursive | jq -r '.Parameters[] | .Name' | tr '\r\n' ' '); do aws ssm delete-parameter --name ${key}; done

NOTE: Be careful if you copy & paste this as it will remove everything under "/"

Upvotes: 1

Eugene Khyst
Eugene Khyst

Reputation: 10315

When you need to delete all parameters by path in AWS Systems Manager Parameter Store and there are more than 10 parameters you have to deal with pagination. Otherwise, an the command will fail with the error:

An error occurred (ValidationException) when calling the DeleteParameters operation: 1 validation error detected: Value '[/config/application/prop1, ...]' at 'names' failed to satisfy constraint: Member must have length less than or equal to 10

The following Bash script using AWS CLI pagination options deletes any number of parameters from AWS SSM Parameter Store by path:

#!/bin/bash

path=/config/application_dev/

while : ; do
  aws ssm delete-parameters --names $(aws ssm get-parameters-by-path --path "$path" --query "Parameters[*].Name" --output text --max-items 10 $starting_token | grep -v None)
  next_token=$(aws ssm get-parameters-by-path --path "$path" --query NextToken --output text --max-items 10 | grep -v None)
  if [ -z "$next_token" ]; then
    starting_token=""
    break
  else
    starting_token="--starting-token $next_token"
  fi
done

Upvotes: 6

John Rotenstein
John Rotenstein

Reputation: 270184

You can combine get-parameters-by-path with delete-parameters:

aws ssm delete-parameters --names `aws ssm get-parameters-by-path --path / --query Parameters[].Name --output text`

I tested it by creating two parameters, then running the above command. It successfully deleted by parameters.

Upvotes: 5

Related Questions