Elastic Beanstalk service role not granted permission from additional Policy attached

Question

I am using AWS secrets manager and have created a policy permitting programmatic access to a certain set of secrets. I created a new user and attached that and only that pol