A mechanism for provisioning composite application using secure parameter access is disclosed. A method of one embodiment of the disclosure includes receiving a request for a configuration parameter from a first component of a composite Web application residing on a first virtual machine (VM). The requested configuration parameter can be related to a second component of the composite Web application residing on a second VM. The role of the first component of the composite Web application is identified and a determination is made as to whether the first component has access to the requested configuration parameter based on the role of the first component. If the first component has access, then the requested configuration parameter is provided to the first component.