title: Getting AWS parameters with AmazonSimpleSystemsManagementClient in .NET Core
body: <p>I have set up a parameter in my parameter store using my default account, and have tested I can retrieve it via the AWS CLI with the command:</p>
  <blockquote>
  <p>aws ssm get-parameter --name &quot;/Test/TestParam1&quot;</p>
  </blockquote>
  <p>and also using my region, just in case that was an issue:</p>
  <blockquote>
  <p>aws ssm get-parameter --name &quot;/Test/TestParam1&quot; --region eu-west-1</p>
  </blockquote>
  <p>Now i have created a .net core console app with a reference to the AWS SDK and am trying to retrieve the param via the <strong>AmazonSimpleSystemsManagementClient</strong>, with the following code :</p>
  <pre class="lang-cs prettyprint-override"><code>static async Task GetParameterStore()
  {
  
      var region = Amazon.RegionEndpoint.EUWest1;
  
      var request = new GetParameterRequest()
      {
          WithDecryption = false,
          Name = &quot;/Test/TestParam1&quot;
      };
  
      using (var client = new AmazonSimpleSystemsManagementClient(region))
      {
          try
          {
              var response = await client.GetParameterAsync(request);
              var value = response.Parameter.Value;
              Console.WriteLine($&quot;Parameter {request.Name} has value: {response.Parameter.Value}&quot;);
          }
          catch (Exception ex)
          {
               Console.Error.WriteLine($&quot;Error occurred: {ex.Message}&quot;);
          }
      }
  }
  </code></pre>
  <p>However I keep getting the error:</p>
  <blockquote>
  <p>User X is not authorized to perform: ssm:GetParameter on resource:
  x::parameter/Test/TestParam1  with explicit deny.</p>
  </blockquote>
  <p>I have verified the user mentioned in the error is that of my default account from my credentials file and the same one who created the param in the param store.</p>
  <p>Is there any extra level of access or policy I need to create for my account to get access via the AWS SDK here, that differs from what is needed when using the AWS ssm get-parameter from the command line? Or am I doing something else wrong here?</p>