The This request is forbidden by kms error occurs when you upload, download, or access objects in Object Storage Service (OSS) that are encrypted using Key Management Service (KMS). This error indicates a permissions problem between your identity and the customer master key (CMK) used to encrypt the objects.
Cause
You do not have the required permissions to use the specified CMK.
Solution
Grant the required KMS permissions to the identity making the request. For details on required permissions and how to configure them, see Server-side encryption.
Applies to
Object Storage Service (OSS)