I configured the stack locally and used the KMS secrets provider. When I run the

pulumi up -y

in my build in gitlab, that has the AWS creds to use the key, I get this error in my build.

error: getting secrets manager: secrets (code=Unknown): InvalidSignatureException: The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.

derp, had a typo in my cred secret, nevermind.