Error Code

Status Code	Error Code	Error Message	Description	Measure
400	KMS.0201	Invalid request URL.	Invalid request URL.	Enter a valid URL.
400	KMS.0202	Invalid JSON format of the request message.	Invalid JSON format of the request message.	Enter a valid message.
400	KMS.0203	Request message too long.	Request message too long.	Enter a valid message.
400	KMS.0204	Parameters missing in the request message.	Parameters missing in the request message.	Enter a valid message.
400	KMS.0205	Invalid key ID.	Invalid key ID.	Enter a valid key ID.
400	KMS.0206	Invalid sequence number.	Invalid sequence number.	Enter a valid sequence number.
400	KMS.0208	Invalid value of value encryption_context.	Invalid value of value encryption_context.	Enter a valid value of encryption_context.
400	KMS.0209	The key has been disabled.	The key has been disabled.	Enable the key.
400	KMS.0210	The key is in Scheduled deletion state and cannot be used.	The key is in Pending deletion state and cannot be used.	Enable the key.
400	KMS.0211	Cannot perform this operation on Default Master Keys.	Cannot perform this operation on default master keys.	Perform this operation on a common CMK.
400	KMS.0308	Invalid parameter.	Invalid parameter.	Enter a valid parameter.
400	KMS.0309	External keys required.	An external key is required.	Use an imported key.
400	KMS.0310	The key is not in Pending import state.	The key is not in Pending import state.	Ensure the key is in Pending import state.
400	KMS.0311	Failed to decrypt data using the RSA private key.	Failed to decrypt data using the RSA private key.	Ensure the input ciphertext is correct and try again, or contact customer service.
400	KMS.0312	External keys cannot be rotated.	External keys cannot be rotated.	Use a common CMK.
400	KMS.0313	Key rotation is not enabled.	Key rotation is not enabled.	Enable key rotation.
400	KMS.0401	Tag list cannot be empty.	The tag list cannot be empty.	Enter a valid parameter.
400	KMS.0402	Invalid match value.	Invalid match value.	Enter a valid parameter.
400	KMS.0403	Invalid match key.	Invalid match key.	Enter a valid parameter.
400	KMS.0404	Invalid action.	Invalid action.	Enter a valid parameter.
400	KMS.0405	Invalid tag value.	Invalid tag value.	Enter a valid parameter.
400	KMS.0406	Invalid tag key.	Invalid tag key.	Enter a valid parameter.
400	KMS.0407	Invalid tag list size.	Invalid tag list size.	Enter a valid parameter.
400	KMS.0408	Invalid resourceType.	Invalid resourceType.	Enter a valid parameter.
400	KMS.0409	Too many tags.	Too many tags.	Delete unnecessary tags and try again.
400	KMS.0410	Invalid tag value length.	Invalid tag value length.	Enter a valid parameter.
400	KMS.0411	Invalid tag key length.	Invalid tag key length.	Enter a valid parameter.
400	KMS.0412	Invalid tag list.	Invalid tag list.	Enter a valid parameter.
400	KMS.0413	Too many tag values.	Too many tag values.	Enter a valid parameter.
400	KMS.0415	Invalid matches.	Invalid matches.	Enter a valid parameter.
400	KMS.0417	Invalid offset.	Invalid offset.	Enter a valid parameter.
400	KMS.1101	Invalid key_alias.	Invalid key_alias.	Enter a valid parameter.
400	KMS.1102	Invalid realm.	Invalid realm.	Enter a valid parameter.
400	KMS.1103	Invalid key_description.	Invalid key_description.	Enter a valid parameter.
400	KMS.1104	Duplicate key aliases.	Duplicate key aliases.	Use another alias.
400	KMS.1105	Too many keys.	Too many keys.	Increase key quota or delete unnecessary keys.
400	KMS.1201	The key is not disabled.	The key is not disabled.	Disable the key.
400	KMS.1301	The key is not enabled.	The key is not enabled.	Enable the key.
400	KMS.1401	Set the pending deletion period between 7 to 1096 days.	Set the pending deletion period between 7 to 1096 days.	Enter a valid parameter.
400	KMS.1402	The key is already in Pending deletion state.	The key is already in Pending deletion state.	No further operation required.
400	KMS.1501	The key is not in Pending deletion state.	The key is not in Pending deletion state.	Schedule deletion the key.
400	KMS.1601	Invalid limit.	Invalid limit.	Enter a valid parameter.
400	KMS.1602	marker must be greater than or equals 0.	marker must be greater than or equals 0.	Enter a valid parameter.
400	KMS.1801	random_data_length must be 512 bits.	random_data_length must be 512 bits.	Enter a valid parameter.
400	KMS.1901	datakey_length must be in the range 8 bits to 8,192 bits.	datakey_length must be in the range 8 bits to 8,192 bits.	Enter a valid parameter.
400	KMS.2001	datakey_length must be 512 bits.	datakey_length must be 512 bits.	Enter a valid parameter.
400	KMS.2101	Invalid plain_text.	Invalid plain_text.	Enter a valid parameter.
400	KMS.2102	datakey_plain_length must be 64 bytes.	datakey_plain_length must be 64 bytes.	Enter a valid parameter.
400	KMS.2103	Failed to verify the DEK hash.	Failed to verify the DEK hash.	Check whether the DEK is valid.
400	KMS.2201	Invalid cipher_text.	invalid cipher_text.	Enter a valid parameter.
400	KMS.2202	datakey_cipher_length must be 64 bytes.	datakey_cipher_length must be 64 bytes.	Enter a valid parameter.
400	KMS.2203	Failed to verify the DEK hash.	Failed to verify the DEK hash.	Check whether the DEK is valid.
400	KMS.2601	Token expired.	Token expired.	Obtain a new token.
400	KMS.2602	Key expiration time must be later than the current time.	Key expiration time must be later than the current time.	Set a valid key expiration time.
400	KMS.2603	Key IDs in the imported key and token do not match.	Key IDs in the imported key and token do not match.	Ensure the key ID in the imported key matches that in the token.
400	KMS.2604	The external key plaintext length must be 32 bits.	The external key plaintext length must be 32 bits.	Enter a valid parameter.
400	KMS.2605	Token verification failed.	Token verification failed.	Obtain a new token.
400	KMS.2606	You are importing a deleted key again. The imported plaintext must be the same as the deleted key plaintext.	You are importing a deleted key again. The imported plaintext must be the same as the deleted key plaintext.	Ensure the plaintext of the imported key is the same as that of the deleted key.
400	KMS.2701	Key material is not in Enabled or Disabled state and cannot be deleted.	Key material is not in Enabled or Disabled state and cannot be deleted.	Ensure that the key is in Enabled or Disabled state.
403	KMS.0301	Invalid or null X-Auth-Token.	Invalid or null X-Auth-Token.	Obtain the token again and ensure the token string is complete.
403	KMS.0302	Invalid X-Auth-Token.	Invalid X-Auth-Token.	Obtain the token again and ensure the token string is complete.
403	KMS.0303	X-Auth-Token expired.	X-Auth-Token expired.	Obtain the token again and ensure the token string is complete.
403	KMS.0304	X-Auth-Token contains the OBT tag and cannot be used to access services.	X-Auth-Token contains the OBT tag and cannot be used to access services.	Obtain the token again and ensure the token string is complete.
403	KMS.0305	Invalid X-Auth-Token project name.	Invalid X-Auth-Token project name.	Obtain the token again and ensure the token string is complete.
403	KMS.0306	No access permissions.	The user has no permission to access the key.	Contact the KMS administrator to grant required permissions.
403	KMS.0307	No access permissions.	No access permissions.	Contact the administrator to grant required permissions.
500	KMS.0101	KMS error.	KMS error.	Try again.
500	KMS.0102	Abnormal KMS I/O.	Abnormal KMS I/O.	Try again.