apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
  name: aws-parameters-store
spec:
  provider:
    aws:
      service: ParameterStore
      region: ca-central-1
      auth:
        secretRef:
          accessKeyIDSecretRef:
            name: aws-parameters-external-secrets-access-key
            key: access-key
            namespace: kube-system
          secretAccessKeySecretRef:
            name: aws-parameters-external-secrets-access-key
            key: secret-access-key
            namespace: kube-system