All Products
Search
Document Center

Key Management Service:ReleaseKmsInstance

Last Updated:Jul 29, 2025

Releases a pay-as-you-go KMS instance.

Operation description

  • For information about the access policy that is required to allow a RAM user or RAM role to call this OpenAPI operation, see Resource Access Management.

  • Subscription instances cannot be manually released. You can only unsubscribe from them under specific conditions. To unsubscribe, go to the Expenses and Costs page in the console and choose Unsubscribe. For more information, see Unsubscription policy.

  • After you release an instance, all resources in the instance are also released. Resources that are encrypted using keys in the instance cannot be decrypted, and credentials cannot be retrieved. Before you release an instance, make sure that no data is encrypted by the keys in the instance and no services call the credentials. This prevents service interruptions.

  • If your instance is a software key management instance, we recommend that you back up the resources of the instance before you release it. The backed-up resources can be recovered. For more information, see Backup management.

  • The billing epoch is daily. Therefore, after you release a pay-as-you-go instance, the bill for the previous day is pushed before 12:00 on the next day.

  • Before you release a KMS instance, we recommend that you check whether deletion protection is enabled for the instance in the console. If deletion protection is enabled, disable it in the console before you release the instance. For more information, see Manage a KMS instance.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

KmsInstanceId

string

Yes

The ID of the KMS instance.

kst-hzz6****

ForceDeleteWithoutBackup

string

No

Specifies whether to forcibly release the KMS instance if it has not been backed up.

  • true: forcibly releases the instance.

  • false (default): does not release the instance.

false

Response parameters

Parameter

Type

Description

Example

object

The returned data.

RequestId

string

The ID of the request, which is a unique identifier generated by Alibaba Cloud for the request. You can use the ID to troubleshoot issues.

475f1620-b9d3-4d35-b5c6-3fbdd941423d

Examples

Success response

JSON format

{
  "RequestId": "475f1620-b9d3-4d35-b5c6-3fbdd941423d"
}

Error codes

HTTP status code

Error code

Error message

Description

400 InvalidParameter The specified parameter is not valid. An invalid value is specified for the parameter.
400 Rejected.UnsupportedOperation Unsupported operation. The operation is not supported.
403 Forbidden.DKMSInstanceNotFound The specified DKMS Instance is not found. Your dedicated KMS instance is not found.
403 Forbidden.NoBackup this kms instance no backup, forbidden delete. This KMS instance has no backup and is not allowed to be deleted.
503 SerivceUnvailableTemporary Service Unvailable Temporary The service is temporarily unavailable.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.