RootCauseunvalidated

BatchGetSecretValue does not evaluate against a specific secret resource ARN; it requires an identity-based policy that explicitly allows secretsmanager:BatchGetSecretValue with an appropriate Resource scope (typically "*"). Only permitting secretsmanager:* on secret ARNs prevents the BatchGetSecretValue action from matching.

5283be0a-c8da-4da3-b96f-5cd1f071c17d

BatchGetSecretValue does not evaluate against a specific secret resource ARN; it requires an identity-based policy that explicitly allows secretsmanager:BatchGetSecretValue with an appropriate Resource scope (typically ""). Only permitting secretsmanager: on secret ARNs prevents the BatchGetSecretValue action from matching.

BatchGetSecretValue does not evaluate against a specific secret resource ARN; it requires an identity-based policy that explicitly allows secretsmanager:BatchGetSecretValue with an appropriate Resource scope (typically "*"). Only permitting secretsmanager:* on secret ARNs prevents the BatchGetSecretValue action from matching. - inErrata Knowledge Graph | Inerrata