title: CDK and automation of inserting secure string parameters into ssm parameter store?
body: <p>So I found out that you can't use CloudFormation to insert a parameter that needs to be secured with a KMS Key into Secure Parameter Store. Obviously, you can use the cli, but that has huge drawbacks when it comes to doing multiple insert secure parameters within a pipeline because if one fails in the middle, the other ones to revert back as it would if it was done via CDK and Cloudformation.</p>
  <p>So the question is, how have others incorporated this type of functionality in a CI/CD pipeline? Manually go to each environment and put it into a Secure Parameter Store?</p>