# Cannot get Secret Manager param value using ssm:/aws/reference/secretsmanager/

**URL:** <https://forum.serverless.com/t/cannot-get-secret-manager-param-value-using-ssm-aws-reference-secretsmanager/16450>\
**Category:** Serverless Framework\
**Tags:** aws, lambda\
**Created:** [December 23, 2021, 7:31pm UTC](https://forum.serverless.com/t/cannot-get-secret-manager-param-value-using-ssm-aws-reference-secretsmanager/16450 "2021-12-23T19:31:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nemesis](https://avatars.discourse-cdn.com/v4/letter/n/96bed5/32.png) [@nemesis](https://forum.serverless.com/u/nemesis)\
**Post date:** [December 23, 2021, 7:31pm UTC](https://forum.serverless.com/t/cannot-get-secret-manager-param-value-using-ssm-aws-reference-secretsmanager/16450/1 "2021-12-23T19:31:34Z")

</div>

I am trying to access secret managers using Serverless secrets framework this way:

Approach1 (Old)  
supersecret: ${ssm(us-east-1, raw):/aws/reference/secretsmanager/secret-name~true}

Approach2 (New)  
variablesResolutionMode: 20210326 in serverless.yaml  
supersecret: ${ssm(us-east-1, raw):/aws/reference/secretsmanager/secret-name}

Approach1 works fine, but I get the below error with Approach2 on serverless deploy-

```auto
Cannot resolve serverless.yml: Variables resolution errored with:
  - Cannot resolve variable at "custom.lambdas.test.custom.supersecret": An error occurred while calling one AWS dependency service.

```

Serverless version - Framework Core: 2.69.1 (local) Plugin: 5.5.1 SDK: 4.3.0 Components: 3.18.1

The secrets are not replicated and only exist in us-east-1. What could I be missing here?

---

<div class="post-metadata">

**Author:** ![markl-vesper](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/markl-vesper/32/2338_2.png) [@markl-vesper](https://forum.serverless.com/u/markl-vesper)\
**Post date:** [August 17, 2022, 12:19am UTC](https://forum.serverless.com/t/cannot-get-secret-manager-param-value-using-ssm-aws-reference-secretsmanager/16450/2 "2022-08-17T00:19:58Z")

</div>

Did you ever resolve this? Just updated from old v2 version to v3 and am getting the same issue

---

<div class="post-metadata">

**Author:** ![TomC](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.serverless.com/tomc/32/4002_2.png) [@TomC](https://forum.serverless.com/u/TomC)\
**Post date:** [November 30, 2022, 6:20pm UTC](https://forum.serverless.com/t/cannot-get-secret-manager-param-value-using-ssm-aws-reference-secretsmanager/16450/3 "2022-11-30T18:20:01Z")

</div>

Almost always when I get it, it’s because my AWS profile (–aws-profile) has no access.