If you happen to’re attempting to set a parameter worth in AWS Programs Supervisor Parameter Retailer you would possibly get this error:
An error occurred (AccessDeniedException) when calling the PutParameter operation: null (Service: AWSKMS; Standing Code: 400; Error Code: AccessDeniedException; Request ID: xxxxxx; Proxy: null)
You possibly can see the service “AWSKMS” right here which signifies that the error is coming from KMS, regardless that you’re making a name to AWS Programs Supervisor Parameter Retailer.
THANK YOU to whomever is including this very useful info.
On this case you have to be attempting to retailer a parameter of sort SecretString and passing in a KMS key id. With the intention to use that KMS key you want two issues:
- Permission to make use of the KMS service in AWS IAM.
- Permission to make use of that particular key within the useful resource coverage hooked up to that key.
On this case you possible don’t have #2. Navigate to KMS, click on in your key, and add a coverage that means that you can encrypt knowledge with that key.
Repair: It could be good so as to add the principal, key ID, the lacking permission (encrypt, decrypt, and so on.), and the coverage that's lacking permissions (like useful resource coverage for KMS Key ID: xyz.
If this helped you otherwise you had this drawback, please clap!
Teri Radichel — Comply with me @teriradichel on Twitter
© 2nd Sight Lab 2022
____________________________________________
About this weblog:
Wish to study extra about Cybersecurity and Cloud Safety? Take a look at: Cybersecurity for Executives within the Age of Cloud on Amazon
Want Cloud Safety Coaching? 2nd Sight Lab Cloud Safety Coaching
Is your cloud safe? Rent 2nd Sight Lab for a penetration check or safety evaluation.
Have a Cybersecurity or Cloud Safety Query? Ask Teri Radichel by scheduling a name with IANS Analysis.
Cybersecurity & Cloud Safety Sources by Teri Radichel: Cybersecurity and Cloud safety lessons, articles, white papers, shows, and podcasts
