I’ve been working on deploying an app using GitLab as CI/CD and using SSM parameters for storing config variables but have been getting this error:

Error Invoke of 'aws:ssm/getParameter:getParameter' failed: rpc error: code = Unknown desc = invocation of aws:ssm/getParameter:getParameter returned an error: invoking aws:ssm/getParameter:getParameter: Error describing SSM parameter: ParameterNotFound:status code: 400
error: update failed

I’ve verified the parameters, IAM permissions and values of the parameters and everything seems to be fine. It doesn’t give any parameter to check in specific where the error log isn’t being helpful. Any idea on how this can be resolved?

Are you sure the plan is running against the correct AWS account?

Just verified, yes it is running against the correct account.

Have you checked CloudTrail?

Yes, nothing helpful

on-prem GitLab or SaaS?

On-prem

could it be Firewall related?

So the weird part here is, the same code with same permissions is running fine in Dev but is failing in Test environment.

@echoing-midnight-60897 AWS will return this if you don't have permission to retrieve the parameter. check there's no policy blocking this

Could try using https://www.pulumi.com/registry/packages/aws/api-docs/ssm/getparametersbypath/ for some debugging

Great, going to try the above two and will update here.