Problem description
When you use bring-your-own-key (BYOK) encryption, the key type corresponding to the specified customer master key (CMK) ID is invalid.
Causes
The key corresponding to the specified CMK ID is not a valid type for BYOK encryption.
Examples
You use BYOK server-side encryption and upload the key and data to Key Management Service (KMS) to generate a CMK ID, but the key is an asymmetric key. Only a symmetric 128-bit key that uses SM4 encryption or a 256-bit key that uses AES encryption can be uploaded to KMS as key material.
Solutions
Verify the key type and review KMS restrictions on key materials. For more information, see Import key material.
References
该文章对您有帮助吗？