AWS Kinesis KMSNotFoundException

What is AWS Kinesis KMSNotFoundException

Understanding AWS Kinesis

AWS Kinesis is a platform on AWS to collect, process, and analyze real-time streaming data, allowing you to get timely insights and react quickly to new information. It is commonly used for real-time analytics, log and event data collection, and processing.

Identifying the Symptom: KMSNotFoundException

When working with AWS Kinesis, you might encounter the KMSNotFoundException error. This error typically occurs when you attempt to use a KMS key that AWS Kinesis cannot find. The error message usually states that the specified KMS key does not exist.

What You Observe

While trying to encrypt data streams or configure encryption settings, you receive an error message indicating that the KMS key is not found. This prevents you from proceeding with your encryption configuration.

Explaining the Issue: KMSNotFoundException

The KMSNotFoundException is an error that occurs when the AWS Key Management Service (KMS) key specified in your Kinesis configuration is not found. This can happen if the key ID is incorrect, the key has been deleted, or the key is in a different AWS region than your Kinesis stream.

Common Causes

The KMS key ID or ARN is incorrect. The KMS key has been deleted or disabled. The KMS key is in a different region than your Kinesis stream.

Steps to Resolve KMSNotFoundException

To resolve the KMSNotFoundException, follow these steps:

Step 1: Verify the KMS Key ID

Ensure that the KMS key ID or ARN you are using is correct. You can list your KMS keys using the AWS CLI:

aws kms list-keys --region

Check the output to confirm that the key ID matches the one you are using in your Kinesis configuration.

Step 2: Check the Key Status

Ensure that the KMS key is not deleted or disabled. You can describe the key to check its status:

aws kms describe-key --key-id --region

Look for the KeyState in the output. It should be Enabled.

Step 3: Verify the Region

Ensure that the KMS key is in the same region as your Kinesis stream. KMS keys are region-specific, and you must use a key from the same region as your Kinesis stream.

Additional Resources

For more information on AWS KMS and managing keys, refer to the AWS KMS Developer Guide. To learn more about configuring encryption for Kinesis, visit the Kinesis Data Streams Encryption Documentation.