Cloud & Infrastructure
Bug Report
SSM Session Manager stopped working after enabling KMS encryption: missing kms:Decrypt
We enabled KMS encryption for Session Manager to meet an audit requirement and every session to our EC2 fleet failed. The instance role could not use the key, the key policy did not allow it, and private instances could not reach KMS at all. The full fix and checks.