Crate hasp_backend_aws_ssm 

aws-ssm:// backend for hasp.

Grammar: aws-ssm://<region>/<parameter-name>?with-decryption=<bool>

• <region> — AWS region (host). Must be non-empty.
• <parameter-name> — Parameter Store name (path). All leading / characters are stripped; hierarchical parameters that require a leading / must be encoded with a double slash after the host.
• ?with-decryption — Optional boolean (default true). Pass false to fetch a SecureString value without invoking KMS.

Supported operations: get, put, list, delete, exists.

Authentication is ambient only: AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY, AWS_PROFILE, IAM role via IMDS/ECS/EKS, or any other source supported by the AWS default credential chain. No auth-bootstrap flows or credential refresh logic lives in this crate.

SSM parameters may be String, StringList, or SecureString. All three expose their value as text through this backend.

Structs

AwsSsmBackend

AWS SSM Parameter Store SDK backend.

AwsSsmUrl

URL shape for aws-ssm:// addresses.