#kms

Cloud & Infrastructure Bug Report

SSM Session Manager stopped working after enabling KMS encryption: missing kms:Decrypt

Samuel Osei · Sep 9, 2026 · 8 min read

We enabled KMS encryption for Session Manager to meet an audit requirement and every session to our EC2 fleet failed. The instance role could not use the key, the key policy did not allow it, and private instances could not reach KMS at all. The full fix and checks.

Cloud & Infrastructure Bug Report

EventBridge rule matched but the SQS queue in another account stayed empty: queue and KMS policies

Tomás Herrera · May 29, 2026 · 7 min read

Order events from our platform account were supposed to reach an SQS queue owned by the analytics account. The rule showed matches, the queue showed nothing, and no error appeared anywhere obvious. Causes: a queue policy without the rule ARN, a KMS key policy that denied EventBridge, and no DLQ to tell us.