Hey all, curious what strategies folks are using with SSM references when updating their stacks. We are using

SecretValue.secretsManager

to add secret refs into our builds but then changing the secret value will not cause a delta, which means they get out of sync. We have been using a NONCE in a

.env

file we can randomize to force some updates, which isn't horrible but also not great. Is there a cleaner way to ask a stack to refresh its SSM references?

There is a

version

param in there somewhere. Changing that creates a delta. Not using it just means “latest”, but being specific solves the issue.

when you say "in there somewhere" what is there? 🙂 the stack?

the params for

SSM.valueForStringParameter

Ah thanks, I'll dig around see what I can find.

class StringParameter (construct) · AWS CDK (amazon.com)