Problem description
OSS returns HTTP 404 (NoSuchKey) when you send a read, upload, or download request to a bucket that uses Key Management Service (KMS)-managed keys for server-side encryption.
Causes
The KMS-managed key specified in the request does not exist in KMS. OSS cannot locate the key to perform encryption or decryption, so the operation fails.
Examples
When you upload an object to a bucket configured with server-side encryption (SSE-KMS), OSS looks up the KMS-managed key specified in the bucket's encryption configuration. If the key is not registered in KMS, the upload fails with HTTP 404.
Solutions
Verify that the specified KMS-managed key exists in Key Management Service. For guidance on managing encryption keys, see Client-side encryption.
If the error persists after confirming the key exists, contact KMS technical support.