SSM Parameter store secrets

I’m trying to find some documentation on using external secrets. Looked around and come across Vault but have been told to go along with AWS due to concerns.
This is for an automation of users / roles in Sumologic
If I’ve missed something obvious I apologise in advance.