https://www.elastic.co/guide/en/security/current/aws-systems-manager-securestring-parameter-request-with-decryption-flag.html