r/aws_ssm_parameter: Implements SSM Parameter Mutability

[Bexanderthebex]

Rollback Plan

If a change needs to be reverted, we will publish an updated version of the library.

Changes to Security Controls

No changes to existing Security Controls

Description

Relations

Closes #49112

References

• https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-versions.html#reference-parameter-version
• [WIP] Resource Identity #42487
• c39a09c
• be7f99c

Output from Acceptance Testing

% make testacc TESTS=TestAccSSMParameter_Identity PKG=ssm

make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Validating schemas
ok      github.com/hashicorp/terraform-provider-aws/internal/provider/sdkv2     3.950s
ok      github.com/hashicorp/terraform-provider-aws/internal/provider/framework 3.898s
make: Running acceptance tests on branch: 🌿 aws-provider-issue-49112 🌿...
TF_ACC=1 go1.26.5 test ./internal/service/ssm/... -v -count 1 -parallel 20 -run='TestAccSSMParameter_Identity'  -timeout 360m -vet=off -buildvcs=false
2026/07/28 20:13:46 Creating Terraform AWS Provider (SDKv2-style)...
2026/07/28 20:13:46 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccSSMParameter_Identity_basic
=== PAUSE TestAccSSMParameter_Identity_basic
=== RUN   TestAccSSMParameter_Identity_regionOverride
=== PAUSE TestAccSSMParameter_Identity_regionOverride
=== RUN   TestAccSSMParameter_Identity_ExistingResource_basic
=== PAUSE TestAccSSMParameter_Identity_ExistingResource_basic
=== RUN   TestAccSSMParameter_Identity_ExistingResource_noRefreshNoChange
=== PAUSE TestAccSSMParameter_Identity_ExistingResource_noRefreshNoChange
=== CONT  TestAccSSMParameter_Identity_basic
=== CONT  TestAccSSMParameter_Identity_ExistingResource_basic
=== CONT  TestAccSSMParameter_Identity_regionOverride
=== CONT  TestAccSSMParameter_Identity_ExistingResource_noRefreshNoChange
--- PASS: TestAccSSMParameter_Identity_regionOverride (34.99s)
--- PASS: TestAccSSMParameter_Identity_basic (35.71s)
--- PASS: TestAccSSMParameter_Identity_ExistingResource_basic (60.28s)
--- PASS: TestAccSSMParameter_Identity_ExistingResource_noRefreshNoChange (68.95s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/ssm        72.907s
...

% make testacc PKG=ssm T=TestAccSSMParameterDataSource
make: Verifying source code with gofmt...
==> Checking that code complies with gofmt requirements...
make: Validating schemas
ok      github.com/hashicorp/terraform-provider-aws/internal/provider/sdkv2     (cached)
ok      github.com/hashicorp/terraform-provider-aws/internal/provider/framework (cached)
make: Running acceptance tests on branch: 🌿 aws-provider-issue-49112 🌿...
TF_ACC=1 go1.26.5 test ./internal/service/ssm/... -v -count 1 -parallel 20 -run='TestAccSSMParameterDataSource'  -timeout 360m -vet=off -buildvcs=false
2026/07/28 22:49:28 Creating Terraform AWS Provider (SDKv2-style)...
2026/07/28 22:49:28 Initializing Terraform AWS Provider (SDKv2-style)...
=== RUN   TestAccSSMParameterDataSource_basic
=== PAUSE TestAccSSMParameterDataSource_basic
=== RUN   TestAccSSMParameterDataSource_fullPath
=== PAUSE TestAccSSMParameterDataSource_fullPath
=== RUN   TestAccSSMParameterDataSource_insecureValue
=== PAUSE TestAccSSMParameterDataSource_insecureValue
=== RUN   TestAccSSMParameterDataSource_version
=== PAUSE TestAccSSMParameterDataSource_version
=== CONT  TestAccSSMParameterDataSource_basic
=== CONT  TestAccSSMParameterDataSource_insecureValue
=== CONT  TestAccSSMParameterDataSource_fullPath
=== CONT  TestAccSSMParameterDataSource_version
--- PASS: TestAccSSMParameterDataSource_fullPath (18.98s)
--- PASS: TestAccSSMParameterDataSource_insecureValue (19.37s)
--- PASS: TestAccSSMParameterDataSource_basic (29.78s)
--- PASS: TestAccSSMParameterDataSource_version (41.19s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/ssm        45.116s

[github-actions]

Community Guidelines

This comment is added to every new Pull Request to provide quick reference to how the Terraform AWS Provider is maintained. Please review the information below, and thank you for contributing to the community that keeps the provider thriving! 🚀

Voting for Prioritization

• Please vote on this Pull Request by adding a 👍 reaction to the original post to help the community and maintainers prioritize it.
• Please see our prioritization guide for additional information on how the maintainers handle prioritization.
• Please do not leave +1 or other comments that do not add relevant new information or questions; they generate extra noise for others following the Pull Request and do not help prioritize the request.

Pull Request Authors

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.

[github-actions]

✅ Thank you for correcting the previously detected issues! The maintainers appreciate your efforts to make the review process as smooth as possible.

[github-actions]

✅ Thank you for correcting the previously detected issues! The maintainers appreciate your efforts to make the review process as smooth as possible.