Troubleshooting CMK issues in SSM Parameter Store

  • Troubleshooting CMK issues in Parameter Store:

    • These are the most common Parameter Store problems:

      • Credentials that an application is using do not have permission to perform the specified action on the CMK - Run the application with different credentials or revise the IAM or key policy that is preventing the operation.

      • CMK is not found - Typically happens when you use an incorrect identifier for the CMK - Find the correct identifiers for the CMK and try the command again.

      • CMK is not enabled - Parameter Store returns an InvalidKeyId exception with a detailed error message from KMS.

Last updated