#2433·manifest

403 AccessDeniedException — "Your subscription does not support this application" when using Kiro

Author: elvysmarcosCreated Jul 7, 2026Updated Jul 14, 2026

When trying to use Kiro through Manifest, I'm getting a 403 error from the CodeWhisperer API:

{"__type":"com.amazon.aws.codewhisperer#AccessDeniedException","message":"Your subscription does not support this application. Please contact your administrator."}

Environment:

  • Auth method: AWS IAM Identity Center (enterprise subscription)
  • Application: Kiro Steps to reproduce:
  1. Authenticate via AWS IAM Identity Center in Manifest
  2. Attempt to use Kiro
  3. Request fails with the 403 AccessDeniedException above What I've checked so far:
  • The user/group appears to have an active subscription assigned in IAM Identity Center
  • Other CodeWhisperer/Q Developer surfaces may be affected as well (this matches reports from other users after the Kiro launch, where an application-specific entitlement seems to be required in addition to a general Q Developer subscription) Question / request:
  • Is this a known issue related to how Manifest requests the Kiro application scope/entitlement from CodeWhisperer?
  • Is there a specific entitlement or configuration on the Manifest side that needs to match what's set up in IAM Identity Center for Kiro?
  • Any guidance on what "administrator" action is expected here would be appreciated. Additional context: Happy to provide request IDs, logs, or further details if helpful for debugging.