diff --git a/README.md b/README.md
index 4015e27..a6aa04a 100644
--- a/README.md
+++ b/README.md
@@ -208,7 +208,6 @@ Available targets:
 | <a name="input_mq_application_user_ssm_parameter_name"></a> [mq\_application\_user\_ssm\_parameter\_name](#input\_mq\_application\_user\_ssm\_parameter\_name) | SSM parameter name for Application username | `string` | `"mq_application_username"` | no |
 | <a name="input_name"></a> [name](#input\_name) | ID element. Usually the component or solution name, e.g. 'app' or 'jenkins'.<br>This is the only ID element not also included as a `tag`.<br>The "name" tag is set to the full `id` string. There is no tag with the value of the `name` input. | `string` | `null` | no |
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | ID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp', to help ensure generated IDs are globally unique | `string` | `null` | no |
-| <a name="input_overwrite_ssm_parameter"></a> [overwrite\_ssm\_parameter](#input\_overwrite\_ssm\_parameter) | Whether to overwrite an existing SSM parameter | `bool` | `true` | no |
 | <a name="input_preserve_security_group_id"></a> [preserve\_security\_group\_id](#input\_preserve\_security\_group\_id) | When `false` and `security_group_create_before_destroy` is `true`, changes to security group rules<br>cause a new security group to be created with the new rules, and the existing security group is then<br>replaced with the new one, eliminating any service interruption.<br>When `true` or when changing the value (from `false` to `true` or from `true` to `false`),<br>existing security group rules will be deleted before new ones are created, resulting in a service interruption,<br>but preserving the security group itself.<br>**NOTE:** Setting this to `true` does not guarantee the security group will never be replaced,<br>it only keeps changes to the security group rules from triggering a replacement.<br>See the [terraform-aws-security-group README](https://github.com/cloudposse/terraform-aws-security-group) for further discussion. | `bool` | `false` | no |
 | <a name="input_publicly_accessible"></a> [publicly\_accessible](#input\_publicly\_accessible) | Whether to enable connections from applications outside of the VPC that hosts the broker's subnets | `bool` | `false` | no |
 | <a name="input_regex_replace_chars"></a> [regex\_replace\_chars](#input\_regex\_replace\_chars) | Terraform regular expression (regex) string.<br>Characters matching the regex will be removed from the ID elements.<br>If not set, `"/[^a-zA-Z0-9-]/"` is used to remove all characters other than hyphens, letters and digits. | `string` | `null` | no |
diff --git a/docs/terraform.md b/docs/terraform.md
index f9bd337..453c872 100644
--- a/docs/terraform.md
+++ b/docs/terraform.md
@@ -86,7 +86,6 @@
 | <a name="input_mq_application_user_ssm_parameter_name"></a> [mq\_application\_user\_ssm\_parameter\_name](#input\_mq\_application\_user\_ssm\_parameter\_name) | SSM parameter name for Application username | `string` | `"mq_application_username"` | no |
 | <a name="input_name"></a> [name](#input\_name) | ID element. Usually the component or solution name, e.g. 'app' or 'jenkins'.<br>This is the only ID element not also included as a `tag`.<br>The "name" tag is set to the full `id` string. There is no tag with the value of the `name` input. | `string` | `null` | no |
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | ID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp', to help ensure generated IDs are globally unique | `string` | `null` | no |
-| <a name="input_overwrite_ssm_parameter"></a> [overwrite\_ssm\_parameter](#input\_overwrite\_ssm\_parameter) | Whether to overwrite an existing SSM parameter | `bool` | `true` | no |
 | <a name="input_preserve_security_group_id"></a> [preserve\_security\_group\_id](#input\_preserve\_security\_group\_id) | When `false` and `security_group_create_before_destroy` is `true`, changes to security group rules<br>cause a new security group to be created with the new rules, and the existing security group is then<br>replaced with the new one, eliminating any service interruption.<br>When `true` or when changing the value (from `false` to `true` or from `true` to `false`),<br>existing security group rules will be deleted before new ones are created, resulting in a service interruption,<br>but preserving the security group itself.<br>**NOTE:** Setting this to `true` does not guarantee the security group will never be replaced,<br>it only keeps changes to the security group rules from triggering a replacement.<br>See the [terraform-aws-security-group README](https://github.com/cloudposse/terraform-aws-security-group) for further discussion. | `bool` | `false` | no |
 | <a name="input_publicly_accessible"></a> [publicly\_accessible](#input\_publicly\_accessible) | Whether to enable connections from applications outside of the VPC that hosts the broker's subnets | `bool` | `false` | no |
 | <a name="input_regex_replace_chars"></a> [regex\_replace\_chars](#input\_regex\_replace\_chars) | Terraform regular expression (regex) string.<br>Characters matching the regex will be removed from the ID elements.<br>If not set, `"/[^a-zA-Z0-9-]/"` is used to remove all characters other than hyphens, letters and digits. | `string` | `null` | no |
diff --git a/main.tf b/main.tf
index c23e819..a8efbab 100644
--- a/main.tf
+++ b/main.tf
@@ -50,7 +50,6 @@ resource "aws_ssm_parameter" "mq_master_username" {
   value       = local.mq_admin_user
   description = "MQ Username for the admin user"
   type        = "String"
-  overwrite   = var.overwrite_ssm_parameter
   tags        = module.this.tags
 }
 
@@ -61,7 +60,6 @@ resource "aws_ssm_parameter" "mq_master_password" {
   description = "MQ Password for the admin user"
   type        = "SecureString"
   key_id      = var.kms_ssm_key_arn
-  overwrite   = var.overwrite_ssm_parameter
   tags        = module.this.tags
 }
 
@@ -71,7 +69,6 @@ resource "aws_ssm_parameter" "mq_application_username" {
   value       = local.mq_application_user
   description = "AMQ username for the application user"
   type        = "String"
-  overwrite   = var.overwrite_ssm_parameter
   tags        = module.this.tags
 }
 
@@ -82,7 +79,6 @@ resource "aws_ssm_parameter" "mq_application_password" {
   description = "AMQ password for the application user"
   type        = "SecureString"
   key_id      = var.kms_ssm_key_arn
-  overwrite   = var.overwrite_ssm_parameter
   tags        = module.this.tags
 }
 
diff --git a/variables.tf b/variables.tf
index afa090a..38ffbdf 100644
--- a/variables.tf
+++ b/variables.tf
@@ -106,12 +106,6 @@ variable "subnet_ids" {
   description = "List of VPC subnet IDs"
 }
 
-variable "overwrite_ssm_parameter" {
-  type        = bool
-  description = "Whether to overwrite an existing SSM parameter"
-  default     = true
-}
-
 variable "ssm_parameter_name_format" {
   type        = string
   description = "SSM parameter name format"