Updated on 2026-07-27 GMT+08:00

InvalidAccessKeyId

The security token is invalid.

Error description

Invalid security token.

Related knowledge

A temporary AK/SK pair and a security token together form temporary security credentials. Temporary security credentials have validity periods. During the validity period, credentials can be used to access cloud services. After expiration, they are no longer valid.

Error cause

  • Cause 1: The security token provided in the request has an invalid format. It may be damaged or incomplete.
  • Cause 2: The security token provided in the request has expired.
  • Cause 3: The AK provided in the request does not match the temporary AK associated with the security token.

Handling suggestion

  • For cause 1: Check that the temporary AK/SK and security token are intact and contain no extra, missing, or incorrect characters.
  • For cause 2: Obtain the security token again.
  • For cause 3: Ensure that the temporary AK provided in the request matches the security token.

The OBS Access Key Id you provided does not exist in our records.

Error description

The AK provided in the request is not found in the database.

Error cause

  • Cause 1: The AK provided is inconsistent with the AK in use. To view an AK, see Access Keys.
  • Cause 2: The AK has been deleted. To view the user's AKs, see Access Keys.

Handling suggestion

  • For cause 1:

    Check that the AK provided in the request is the same as the AK in use and contains no extra, missing, or incorrect characters.

  • For cause 2:

    Create an AK and use the new AK to try again.

The user holding this access key has been disabled.

Error description

The user associated with the provided AK has been disabled.

Error cause

The user associated with the provided AK has been disabled.

Handling suggestion

  1. Log in to the IAM console as the IAM administrator and go to the Users page.
  2. Click the username corresponding to the AK to go to the user details page.
  3. Check the user status and change the status from Disabled to Enabled.

This user only supports console access, not programmatic access.

Error description

The provided AK allows console access only. Programmatic access is not supported.

Error cause

The provided AK allows console access only. Programmatic access is not supported.

Handling suggestion

  1. Log in to the IAM console as the IAM administrator and go to the Users page.
  2. Click the username corresponding to the AK to go to the user details page.
  3. On the details page, select Programmatic access under Access Type.

the access key XXX is inactive.

Error description

AK disabled.

Error cause

The provided AK is disabled.

Handling suggestion

Enable the AK. For details, see Enabling/Disabling Access Keys.