error when sending prompt after installation

[odeta939]

Checks

• I have searched github.com/aws/amazon-q-developer-cli/issues and there are no duplicates of my issue
• I have run q doctor in the affected terminal session
• I have run q restart and replicated the issue again

Operating system

macOS 26.3.1 (25D2128)

Expected behaviour

after sending a prompt in the cli I should get a response from the model.

Actual behaviour

request_id: 70844f28-df3e-4422-ac25-9806a796b394, error: An unknown error occurred:
ValidationException

Steps to reproduce

1. install Kiro
2. run kiro-cli in the terminal
3. type a prompt

Environment

<This will be visible to anyone. Do not include personal or sensitive information>

[q-details]
version = "2.0.1"
hash = "4a41569da83e25b6ab94898d7c4c83fa18cb5216"
date = "2026-04-17T02:21:00.156808Z (4d ago)"
variant = "full"

[system-info]
os = "macOS 26.3.1 (25D2128)"
chip = "Apple M4 Pro"
total-cores = 12
memory = "24.00 GB"

[environment]
cwd = "/Users/USER"
cli-path = "/Users/USER"
os = "Mac"
shell-path = "/bin/zsh"
shell-version = "5.9"
terminal = "Ghostty"
install-method = "unknown"

[env-vars]
PATH = "/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pmk/env/global/bin:/Applications/Ghostty.app/Contents/MacOS:/Users/USER/.local/bin"
QTERM_SESSION_ID = "b71ae4ae4d4143828d85cb6669097961"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "2.0.1"
SHELL = "/bin/zsh"
TERM = "xterm-ghostty"
__CFBundleIdentifier = "com.mitchellh.ghostty"

[mjcnw]

I'm also seeing this issue.

Kiro IDE works fine on the same creds/setup but the cli does not work. From the window it looks like its all logged in but when I try to run a command in the terminal or via jetbrains IDE, I get the same error as above. But my Kiro IDE works fine (and I've also logged out and back in of that to double check)

[mjcnw]

running kiro-cli --classic gave more info when running a prompt and then getting an error:

Kiro is having trouble responding right now:
0: Failed to send the request: An unknown error occurred: ValidationException
1: An unknown error occurred: ValidationException
2: unhandled error (ValidationException)
3: service error
4: unhandled error (ValidationException)
5: Error { code: "ValidationException", message: "profileArn is required for this request.", aws_request_id: "XXX }

Location:
crates/chat-cli/src/cli/chat/mod.rs:1717

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

I ran that through kiro IDE.and it comes back with:

There it is — profileArn is required for this request. It's authenticated but needs an IAM Identity Centre profile ARN to make API calls, and you don't have one assigned.

This confirms it's an admin-side thing. Your Identity Centre identity needs a permission set (profile) assigned to it. The IDE doesn't need this because it uses a different API path, but the CLI's backend requires a profileArn.

You'd need whoever manages your AWS Identity Centre to assign your user a permission set. The profile ARN looks like:

arn:aws:sso:::permissionSet/ssoins-XXXX/ps-XXXX
This isn't something you can create yourself — it's an org-level admin action. Might be worth raising with your AWS account team or checking if there's a self-service portal for requesting access.

Short version: the CLI works, auth works, but your account is missing the required permission set in Identity Centre. Not a local config problem.

[mjcnw]

This appears to be working today after a log out and back in again through the settings in the app (launch from spotlight, click the icon, settings, log out).

The select profile window briefly appears and then disappears and log in is successful - so this looks like it was something transient on the AWS side.