Fatal error: Uncaught GuzzleHttp\Exception\ClientException: Client error: `POST https://ssm.eu-central-1.amazonaws.com` resulted in a `400 Bad Request` response: {"__type":"AccessDeniedException","Message":"User: arn:aws:sts::023589531123:assumed-role/Sandbox-StackWebSBS-KLV2OCNP20 (truncated...) in /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/guzzle/src/Exception/RequestException.php:111 Stack trace: #0 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/guzzle/src/Middleware.php(72): GuzzleHttp\Exception\RequestException::create() #1 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(204): GuzzleHttp\Middleware::GuzzleHttp\{closure}() #2 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(153): GuzzleHttp\Promise\Promise::callHandler() #3 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/TaskQueue.php(48): GuzzleHttp\Promise\Promise::GuzzleHttp\Promise\{closure}() #4 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php(167): GuzzleHttp\Promise\TaskQueue->run() #5 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php(206): GuzzleHttp\Handler\CurlMultiHandler->tick() #6 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(248): GuzzleHttp\Handler\CurlMultiHandler->execute() #7 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(224): GuzzleHttp\Promise\Promise->invokeWaitFn() #8 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(269): GuzzleHttp\Promise\Promise->waitIfPending() #9 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(226): GuzzleHttp\Promise\Promise->invokeWaitList() #10 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(269): GuzzleHttp\Promise\Promise->waitIfPending() #11 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(226): GuzzleHttp\Promise\Promise->invokeWaitList() #12 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(62): GuzzleHttp\Promise\Promise->waitIfPending() #13 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/aws/aws-sdk-php/src/AwsClientTrait.php(58): GuzzleHttp\Promise\Promise->wait() #14 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/aws/aws-sdk-php/src/AwsClientTrait.php(86): Aws\AwsClient->execute() #15 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/SBS/SSM/SsmClient.php(129): Aws\AwsClient->__call() #16 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/Config/Dynamic/DynamicConfiguration.php(1501): SBS\SSM\SsmClient->getParametersByPath() #17 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/Config/Dynamic/DynamicConfiguration.php(1615): SBS\Lib\Config\Dynamic\DynamicConfiguration::loadFromSSM() #18 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(191): SBS\Lib\Config\Dynamic\DynamicConfiguration::fromSSM() #19 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(330): EnvConf::getConf() #20 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(66): EnvConf::init() #21 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(261): EnvConf::conf() #22 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(285): EnvConf::dbInfo() #23 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/bootstrap_db.php(11): EnvConf::newPDO() #24 /var/deploy/buildDirectory/sbs/SBS-Gateway/config/common/define.php(7): include_once('...') #25 /var/deploy/buildDirectory/sbs/SBS-Gateway/web/index.php(8): require('...') #26 {main} Next Aws\Ssm\Exception\SsmException: Error executing "GetParametersByPath" on "https://ssm.eu-central-1.amazonaws.com"; AWS HTTP error: Client error: `POST https://ssm.eu-central-1.amazonaws.com` resulted in a `400 Bad Request` response: {"__type":"AccessDeniedException","Message":"User: arn:aws:sts::023589531123:assumed-role/Sandbox-StackWebSBS-KLV2OCNP20 (truncated...) AccessDeniedException (client): User: arn:aws:sts::023589531123:assumed-role/Sandbox-StackWebSBS-KLV2OCNP20RG-StackIamE-Ec2Role-1SV3YADFNJ2FS/i-060094b02e8fa7613 is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:eu-central-1:023589531123:key/f9a6cef0-797c-4f26-9b93-b6b964b3b887 because no identity-based policy allows the kms:Decrypt action (Service: AWSKMS; Status Code: 400; Error Code: AccessDeniedException; Request ID: a3e1017d-b22f-4d8a-8031-7516d22589fa; Proxy: null) - {"__type":"AccessDeniedException","Message":"User: arn:aws:sts::023589531123:assumed-role/Sandbox-StackWebSBS-KLV2OCNP20RG-StackIamE-Ec2Role-1SV3YADFNJ2FS/i-060094b02e8fa7613 is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:eu-central-1:023589531123:key/f9a6cef0-797c-4f26-9b93-b6b964b3b887 because no identity-based policy allows the kms:Decrypt action (Service: AWSKMS; Status Code: 400; Error Code: AccessDeniedException; Request ID: a3e1017d-b22f-4d8a-8031-7516d22589fa; Proxy: null)"} in /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/aws/aws-sdk-php/src/WrappedHttpHandler.php:196 Stack trace: #0 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/aws/aws-sdk-php/src/WrappedHttpHandler.php(97): Aws\WrappedHttpHandler->parseError() #1 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(204): Aws\WrappedHttpHandler->Aws\{closure}() #2 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(169): GuzzleHttp\Promise\Promise::callHandler() #3 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/RejectedPromise.php(42): GuzzleHttp\Promise\Promise::GuzzleHttp\Promise\{closure}() #4 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/TaskQueue.php(48): GuzzleHttp\Promise\RejectedPromise::GuzzleHttp\Promise\{closure}() #5 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php(167): GuzzleHttp\Promise\TaskQueue->run() #6 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php(206): GuzzleHttp\Handler\CurlMultiHandler->tick() #7 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(248): GuzzleHttp\Handler\CurlMultiHandler->execute() #8 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(224): GuzzleHttp\Promise\Promise->invokeWaitFn() #9 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(269): GuzzleHttp\Promise\Promise->waitIfPending() #10 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(226): GuzzleHttp\Promise\Promise->invokeWaitList() #11 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(269): GuzzleHttp\Promise\Promise->waitIfPending() #12 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(226): GuzzleHttp\Promise\Promise->invokeWaitList() #13 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/guzzlehttp/promises/src/Promise.php(62): GuzzleHttp\Promise\Promise->waitIfPending() #14 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/aws/aws-sdk-php/src/AwsClientTrait.php(58): GuzzleHttp\Promise\Promise->wait() #15 /var/deploy/buildDirectory/sbs/SBS-Lib/vendor/aws/aws-sdk-php/src/AwsClientTrait.php(86): Aws\AwsClient->execute() #16 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/SBS/SSM/SsmClient.php(129): Aws\AwsClient->__call() #17 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/Config/Dynamic/DynamicConfiguration.php(1501): SBS\SSM\SsmClient->getParametersByPath() #18 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/Config/Dynamic/DynamicConfiguration.php(1615): SBS\Lib\Config\Dynamic\DynamicConfiguration::loadFromSSM() #19 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(191): SBS\Lib\Config\Dynamic\DynamicConfiguration::fromSSM() #20 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(330): EnvConf::getConf() #21 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(66): EnvConf::init() #22 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(261): EnvConf::conf() #23 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(285): EnvConf::dbInfo() #24 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/bootstrap_db.php(11): EnvConf::newPDO() #25 /var/deploy/buildDirectory/sbs/SBS-Gateway/config/common/define.php(7): include_once('...') #26 /var/deploy/buildDirectory/sbs/SBS-Gateway/web/index.php(8): require('...') #27 {main} Next SBS\SSM\SsmException: Failed to get parameters by path '/sandbox/config/': Error executing "GetParametersByPath" on "https://ssm.eu-central-1.amazonaws.com"; AWS HTTP error: Client error: `POST https://ssm.eu-central-1.amazonaws.com` resulted in a `400 Bad Request` response: {"__type":"AccessDeniedException","Message":"User: arn:aws:sts::023589531123:assumed-role/Sandbox-StackWebSBS-KLV2OCNP20 (truncated...) AccessDeniedException (client): User: arn:aws:sts::023589531123:assumed-role/Sandbox-StackWebSBS-KLV2OCNP20RG-StackIamE-Ec2Role-1SV3YADFNJ2FS/i-060094b02e8fa7613 is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:eu-central-1:023589531123:key/f9a6cef0-797c-4f26-9b93-b6b964b3b887 because no identity-based policy allows the kms:Decrypt action (Service: AWSKMS; Status Code: 400; Error Code: AccessDeniedException; Request ID: a3e1017d-b22f-4d8a-8031-7516d22589fa; Proxy: null) - {"__type":"AccessDeniedException","Message":"User: arn:aws:sts::023589531123:assumed-role/Sandbox-StackWebSBS-KLV2OCNP20RG-StackIamE-Ec2Role-1SV3YADFNJ2FS/i-060094b02e8fa7613 is not authorized to perform: kms:Decrypt on resource: arn:aws:kms:eu-central-1:023589531123:key/f9a6cef0-797c-4f26-9b93-b6b964b3b887 because no identity-based policy allows the kms:Decrypt action (Service: AWSKMS; Status Code: 400; Error Code: AccessDeniedException; Request ID: a3e1017d-b22f-4d8a-8031-7516d22589fa; Proxy: null)"} in /var/deploy/buildDirectory/sbs/SBS-Lib/lib/SBS/SSM/SsmClient.php:140 Stack trace: #0 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/Config/Dynamic/DynamicConfiguration.php(1501): SBS\SSM\SsmClient->getParametersByPath() #1 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/Config/Dynamic/DynamicConfiguration.php(1615): SBS\Lib\Config\Dynamic\DynamicConfiguration::loadFromSSM() #2 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(191): SBS\Lib\Config\Dynamic\DynamicConfiguration::fromSSM() #3 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(330): EnvConf::getConf() #4 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(66): EnvConf::init() #5 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(261): EnvConf::conf() #6 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/EnvConf.php(285): EnvConf::dbInfo() #7 /var/deploy/buildDirectory/sbs/SBS-Lib/lib/bootstrap_db.php(11): EnvConf::newPDO() #8 /var/deploy/buildDirectory/sbs/SBS-Gateway/config/common/define.php(7): include_once('...') #9 /var/deploy/buildDirectory/sbs/SBS-Gateway/web/index.php(8): require('...') #10 {main} thrown in /var/deploy/buildDirectory/sbs/SBS-Lib/lib/SBS/SSM/SsmClient.php on line 140