So that happened. And I spent much longer than should’ve been necessary to figure it out. What I was trying to do was this: Create a symmetric AWS KMS CMK Use that to generate a couple of asymmetric key pairs Save those key pairs to Secrets Manager, using the above CMK as the encryption key… Continue reading AccessDeniedException: Access to KMS is not allowed