Problem description
OSS returns HTTP 404 when a read (GetObject), upload (PutObject), or download request targets a bucket with server-side encryption (SSE-KMS) configured, and the KMS key alias specified in the request does not exist.
Causes
The alias of the KMS-managed key specified in the request is not created or is deleted.
Examples
You upload an object to a bucket that uses SSE-KMS encryption. If the alias of the KMS-managed key specified in the request does not exist or was deleted, OSS returns HTTP 404.
Solutions
Call ListAliases to list all aliases in the account's region, and confirm whether the expected alias exists.
If the alias does not exist, call CreateAlias to create it and associate it with the correct KMS key.
If the error persists after the alias is restored, contact KMS technical support.