Lambda couldn't decrypt the environment variables because KMS access was denied. Check the Lambda function's KMS permissions.