aws-parameter-store

aws:
  login:
    fn::open::aws-login:
      oidc:
        roleArn: arn:aws:iam::123456789:role/esc-oidc
        sessionName: pulumi-environments-session
  params:
    fn::open::aws-parameter-store:
      region: us-west-1
      login: ${aws.login}
      get:
        myKey:
          name: /myNamespace/myKey
        myKeyByVersion:
          name: /myNamespace/myKey:1
        myKeyByVersionLabel:
          name: /myNamespace/myKey:stable
        secureKey:
          name: /myNamespace/secureKey
          decrypt: true
        myList:
          name: /myNamespace/myList

{
  "aws": {
    "login": {
      "accessKeyId": "ASIA....",
      "secretAccessKey": "mWdm....",
      "sessionToken": "Fwo...."
    },
    "params": {
      "myKey": "latest value",
      "myKeyByVersion": "old value",
      "myKeyByVersionLabel": "stable value",
      "secureKey": "secret value",
      "myList": [
        "value 1",
        "value 2"
      ]
    }
  }
}