


 Short description
------------------



The **ThrottlingException** error code indicates that the rate of requests to AWS KMS is exceeding the [request quotas](https://docs.aws.amazon.com/kms/latest/developerguide/requests-per-second.html) for your AWS account. As a result, the AWS KMS service throttles the request.



 Resolution
-----------



Use the following best practices to troubleshoot **ThrottlingException** errors:


* Review [AWS KMS usage metrics](https://aws.amazon.com/blogs/security/manage-your-aws-kms-api-request-rates-using-service-quotas-and-amazon-cloudwatch/) from the service quotas service to identify the maximum and average rate of requests per second. AWS KMS publishes usage metrics to Amazon CloudWatch for different AWS KMS request quotas. For example, [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) and [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) operations use [shared quotas for cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/requests-per-second.html#rps-shared-limit).
* Reduce the rate of requests and consider using or modifying the [backoff and retry logic](https://docs.aws.amazon.com/general/latest/gr/api-retries.html).
* For server-side encryption using AWS KMS CMKs (SSE-KMS) with Amazon Simple Storage Service (Amazon S3) buckets, use an S3 Bucket Key. For instructions, see [Reducing the cost of SSE-KMS with Amazon S3 Bucket Keys](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-key.html).
* Use the [data key caching](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/data-key-caching.html) feature with the AWS Encryption SDK encryption library. Data key caching reduces the rate of API requests by caching and reusing the data keys for encryption to meet cost and performance requirements.
* [Request an AWS KMS quota increase](https://docs.aws.amazon.com/kms/latest/developerguide/increase-quota.html) to exceed the request quota.
* [Create an Amazon CloudWatch alarm](https://aws.amazon.com/blogs/security/manage-your-aws-kms-api-request-rates-using-service-quotas-and-amazon-cloudwatch/) to alert you when a utilization percentage is reached before you reach the request quota.





---




 Related information
--------------------



[What happens to new or existing objects when I enable default encryption with AWS KMS on my Amazon S3 bucket?](https://repost.aws/knowledge-center/s3-aws-kms-default-encryption)


[Manage your AWS KMS API request rates using Service Quotas and Amazon CloudWatch](https://aws.amazon.com/blogs/security/manage-your-aws-kms-api-request-rates-using-service-quotas-and-amazon-cloudwatch/)







I received a ThrottlingException error when making requests to AWS Key Management Service (AWS KMS) similar to the following:
You have exceeded the rate at which you may call KMS. Reduce the frequency of your calls. (Service: AWSKMS; Status Code: 400; Error Code: ThrottlingException; Request ID: EXAMPLEID

Resolve the KMS ThrottlingExceptions error

Why am I receiving a ThrottlingExceptions error when making requests to AWS KMS?

Seguridad, identidad y cumplimiento

¿Por qué aparece el error “Server refused our key” (El servidor rechazó la clave) cuando intento conectarme a mi instancia de EC2 mediante SSH?

¿Cómo puedo evitar los errores RequestLimitExceeded cuando utilizo PowerShell para lanzar varias instancias de Amazon EC2 mediante programación?

¿Cómo soluciono un error “Status Code: 400; Error Code: xxx” (Código de estado: 400; código de error: xxx) al utilizar CloudFormation para ElastiCache?

Why am I receiving a ThrottlingExceptions error when making requests to AWS KMS?

Short description

Resolution

Related information

Contenido relevante