403 AccessDeniedException — "Your subscription does not support this application" when using Kiro
Author: elvysmarcosCreated Jul 7, 2026Updated Jul 14, 2026
When trying to use Kiro through Manifest, I'm getting a 403 error from the CodeWhisperer API:
{"__type":"com.amazon.aws.codewhisperer#AccessDeniedException","message":"Your subscription does not support this application. Please contact your administrator."}Environment:
- Auth method: AWS IAM Identity Center (enterprise subscription)
- Application: Kiro Steps to reproduce:
- Authenticate via AWS IAM Identity Center in Manifest
- Attempt to use Kiro
- Request fails with the 403 AccessDeniedException above What I've checked so far:
- The user/group appears to have an active subscription assigned in IAM Identity Center
- Other CodeWhisperer/Q Developer surfaces may be affected as well (this matches reports from other users after the Kiro launch, where an application-specific entitlement seems to be required in addition to a general Q Developer subscription) Question / request:
- Is this a known issue related to how Manifest requests the Kiro application scope/entitlement from CodeWhisperer?
- Is there a specific entitlement or configuration on the Manifest side that needs to match what's set up in IAM Identity Center for Kiro?
- Any guidance on what "administrator" action is expected here would be appreciated. Additional context: Happy to provide request IDs, logs, or further details if helpful for debugging.
Source: mnfst/manifest