PREQUEL-2025-0022

External Secrets Access Denied due to IAM PolicyHigh

Impact: 5/10

Mitigation: 4/10

PREQUEL-2025-0022View on GitHub

SecretsAccess Denied

Description

External Secrets access denied due to IAM policy misconfiguration.\n

Mitigation

Add ssm:GetParameter to the user or role in the error. Note that there is an ssm:GetParameter and ssm:GetParameters action.

References

• https://repost.aws/questions/QU_m8virJwQKacrrt6YZa-Pg/access-denied-to-ssm-parameter-but-policy-in-place