You're on-call. PagerDuty fires: the staging API container is in a crash loop. CloudWatch shows this single log line, repeating every restart. An AI assistant offers to open a PR adding the missing IAM permission. What do you do first?
fetch new relic license key: secretsmanager.GetSecretValue
"e356c48f2398bbf21826a12085b8bc42FFFFNRAL": operation error
Secrets Manager: GetSecretValue, https response error
StatusCode: 400, RequestID: b4e0a478-a9f4-4ae7-a365-2cf24be26509,
api error AccessDeniedException: User:
arn:aws:sts::977241494548:assumed-role/pr-api-task-role/...
is not authorized to perform: secretsmanager:GetSecretValue
on resource: e356c48f2398bbf21826a12085b8bc42FFFFNRAL because
no identity-based policy allows the secretsmanager:GetSecretValue
action