Commands

list, search, get, diff, export, browse and deepsearch, with examples.

Every command takes --profile and --region, or reads them from your config. Add --decrypt to show SecureString values.

list

All parameters under a path, shown as ENV_VAR → value.

ssm-explorer list /app/config --profile prod
ssm-explorer list /app/config --profile prod --output json

search

Filter by part of the full path, by value, or both.

ssm-explorer search /app/config --profile prod --filter-path DATABASE
ssm-explorer search /app/config --profile prod --filter-value "postgres://"

get

One parameter's value.

ssm-explorer get /app/config/DATABASE_URL --profile prod --decrypt

diff

Compare two paths, two accounts, or two Regions.

# Two paths in one account
ssm-explorer diff /app/dev /app/prod --profile prod

# The same path in two accounts
ssm-explorer diff /app/config --profile-a stage --profile-b prod

# The same account in two Regions
ssm-explorer diff /app/config --profile-a default --region-a us-east-1 --region-b eu-west-1

Useful filters: --exc-identicals shows differences only; --exc-missing-a hides parameters that exist only on side B; --filter-path narrows the comparison.

export

Write parameters to a .env or JSON file. This local file is the only thing SSM Explorer ever writes.

ssm-explorer export /app/config --profile prod --decrypt --format env --output-file .env
ssm-explorer export /app/config --profile prod --format json --output-file params.json

browse

An interactive viewer with live filtering. Type to filter, Tab switches between filtering by name and by value, arrow keys move, Enter inspects, Esc exits.

ssm-explorer browse /app/config --profile prod
ssm-explorer browse /app --output value   # print the chosen value to stdout

deepsearch

Search several profiles and Regions at once.

ssm-explorer deepsearch --profile dev,prod --region us-east-1,eu-west-1 --filter-path DATABASE

Count this visit?