title: AWS System Manager GetParameters permission being implicitly denied
body: <p>I am trying to setup eksctl for eks but it throwing
  <code>&quot;Error: unable to determine AMI to use: error getting AMI from SSM Parameter Store: AccessDeniedException: User: arn:aws:iam:::user/cnc is not authorized to perform: ssm:GetParameter on resource: arn:aws:ssm:us-east-1::parameter/aws/service/eks/optimized-ami/1.18/amazon-linux-2/recommended/image_id&quot;.</code></p>
  <p>The IAM Permission Policy I am using is</p>
  <pre><code>    &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: [
                  &quot;ssm:DescribeParameters&quot;
              ],
              &quot;Resource&quot;: &quot;*&quot;
          },
          {
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: [
                  &quot;ssm:GetParameters&quot;,
                  &quot;ssm:GetParametersByPath&quot;
              ],
              &quot;Resource&quot;: &quot;arn:aws:ssm:::parameter/*&quot;
          }
      ]
  </code></pre>
  <p>I also tried using policy simulation for check the permissions , it is giving me &quot;Implicitly Denied (No matching statement)&quot;</p>