Following SYSTEMSMANAGER Controls are implemented:

1. aws-systemsmanager-m-1: Ensure Parameter store “Secure String” parameter is encrypted with AWS CMK.