# Error responses
This section provides reference information about Amazon S3 errors.
**Note**
In general, S3 bucket owners are billed for requests with HTTP `200 OK` successful responses and HTTP `4XX` client error responses. Bucket owners aren't billed for HTTP `5XX` server error responses, such as HTTP `503 Slow Down` errors. For more information on S3 error codes under HTTP `3XX` and `4XX` status codes that aren't billed, see [Billing for Amazon S3 error responses](/AmazonS3/latest/userguide/ErrorCodeBilling.html) in the Amazon S3 User Guide. For more information about billing charges if your bucket is configured as a Requester Pays bucket, see [How Requester Pays charges work](/AmazonS3/latest/userguide/RequesterPaysBuckets.html#ChargeDetails) in the Amazon S3 User Guide.
SOAP support over HTTP is deprecated, but SOAP is still available over HTTPS. New Amazon S3 features are not supported for SOAP. Instead of using SOAP, we recommend that you use either the REST API or the AWS SDKs.
**Topics**
+ [
## REST error responses
](#RESTErrorResponses)
+ [
## List of error codes
](#ErrorCodeList)
+ [
## List of SELECT Object Content Error Codes
](#SelectObjectContentErrorCodeList)
+ [
## List of Replication-related error codes
](#ReplicationErrorCodeList)
+ [
## List of Tagging-related error codes
](#S3TaggingErrorCodeList)
+ [
## List of Amazon S3 on Outposts error codes
](#S3OutpostsErrorCodeList)
+ [
## List of Amazon S3 Storage Lens error codes
](#S3LensErrorCodeList)
+ [
## List of Amazon S3 Object Lambda error codes
](#S3ObjectLambdaErrorCodeList)
+ [
## List of Amazon S3 asynchronous error codes
](#S3AsynchronousErrorCodeList)
+ [
## List of Amazon S3 Access Grants error codes
](#S3AccessGrantsErrorCodeList)
+ [
## List of Amazon FSx-related error codes
](#FSXErrorCodeList)
+ [
## List of Amazon S3 Tables error codes
](#S3TablesErrorCodeList)
+ [
# Amazon S3 error best practices
](ErrorBestPractices.md)
## REST error responses
When an error occurs, the header information contains the following:
+ Content-Type: application/xml
+ An appropriate 3xx, 4xx, or 5xx HTTP status code
The body of the response also contains information about the error. The following sample error response shows the structure of response elements common to all REST error responses.
```
1.
2.
3. NoSuchKey
4. The resource you requested does not exist
5. /mybucket/myfoto.jpg
6. 4442587FB7D0A2F9
7.
```
The following table explains the REST error response elements.
| Name | Description |
| --- | --- |
| Code | The error code is a string that uniquely identifies an error condition. It is meant to be read and understood by programs that detect and handle errors by type. For more information, see [List of error codes](#ErrorCodeList). Type: String Ancestor: `Error` |
| Error | Container for all error elements. Type: Container Ancestor: None |
| Message | The error message contains a generic description of the error condition in English. It is intended for a human audience. Simple programs display the message directly to the end user if they encounter an error condition they don't know how or don't care to handle. Sophisticated programs with more exhaustive error handling and proper internationalization are more likely to ignore the error message. Type: String Ancestor: `Error` |
| RequestId | ID of the request associated with the error. Type: String Ancestor: `Error` |
| Resource | The bucket or object that is involved in the error. Type: String Ancestor: `Error` |
Many error responses contain additional structured data meant to be read and understood by a developer diagnosing programming errors. For example, if you send a Content-MD5 header with a REST PUT request that doesn't match the digest calculated on the server, you receive a `BadDigest` error. The error response also includes as detail elements the digest that the server calculated, and the digest that you told the server to expect. During development, you can use this information to diagnose the error. In production, a well-behaved program might include this information in its error log.
For information about general response elements, go to [Error responses](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingRESTError.html).
## List of error codes
The following table lists Amazon S3 error codes.
[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html)
## List of SELECT Object Content Error Codes
**Important**
Amazon S3 Select is no longer available to new customers. Existing customers of Amazon S3 Select can continue to use the feature as usual. [Learn more](https://aws.amazon.com/blogs/storage/how-to-optimize-querying-your-data-in-amazon-s3/)
The following table contains special errors that `SELECT Object Content` might return. For general information about Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error code | Description | HTTP status code | SOAP fault code prefix |
| --- | --- | --- | --- |
| AmbiguousFieldName | The field name matches to multiple fields in the file. Check the SQL expression and the file, and try again. | 400 | Client |
| Busy | The service is unavailable. Try again later. | 503 | Client |
| CastFailed | An attempt to convert from one data type to another using CAST failed in the SQL expression. | 400 | Client |
| ColumnTooLong | The length of a column in the result is greater than maxCharsPerColumn of 1 MB. | 400 | Client |
| CSVEscapingRecordDelimiter | A quoted record delimiter was found in the file. To allow quoted record delimiters, set AllowQuotedRecordDelimiter to 'TRUE'. | 400 | Client |
| CSVParsingError | An error occurred while parsing the CSV file. Check the file and try again. | 400 | Client |
| CSVUnescapedQuote | An unescaped quote was found while parsing the CSV file. To allow quoted record delimiters, set AllowQuotedRecordDelimiter to 'TRUE'. | 400 | Client |
| EmptyRequestBody | The request body cannot be empty. | 400 | Client |
| EvaluatorBindingDoesNotExist | A column name or a path provided does not exist in the SQL expression. | 400 | Client |
| EvaluatorInvalidArguments | There is an incorrect number of arguments in the function call in the SQL expression. | 400 | Client |
| EvaluatorInvalidTimestampFormatPattern | The timestamp format string in the SQL expression is not valid. | 400 | Client |
| EvaluatorInvalidTimestampFormatPatternSymbol | The timestamp format pattern contains a symbol in the SQL expression that is not valid. | 400 | Client |
| EvaluatorInvalidTimestampFormatPatternSymbolForParsing | The timestamp format pattern contains a valid format symbol that cannot be applied to timestamp parsing in the SQL expression. | 400 | Client |
| EvaluatorInvalidTimestampFormatPatternToken | The timestamp format pattern contains a token in the SQL expression that is not valid. | 400 | Client |
| EvaluatorLikePatternInvalidEscapeSequence | An argument given to the LIKE expression was not valid. | 400 | Client |
| EvaluatorNegativeLimit | LIMIT must not be negative. | 400 | Client |
| EvaluatorTimestampFormatPatternDuplicateFields | The timestamp format pattern contains multiple format specifiers representing the timestamp field in the SQL expression. | 400 | Client |
| EvaluatorTimestampFormatPatternHourClockAmPmMismatch | The timestamp format pattern contains a 12-hour hour of day format symbol but doesn't also contain an AM/PM field, or it contains a 24-hour hour of day format specifier and contains an AM/PM field in the SQL expression. | 400 | Client |
| EvaluatorUnterminatedTimestampFormatPatternToken | The timestamp format pattern contains an unterminated token in the SQL expression. | 400 | Client |
| ExpressionTooLong | The SQL expression is too long. The maximum byte-length for an SQL expression is 256 KB. | 400 | Client |
| ExternalEvalException | The query cannot be evaluated. Check the file and try again. | 400 | Client |
| IllegalSqlFunctionArgument | An illegal argument was used in the SQL function. | 400 | Client |
| IncorrectSqlFunctionArgumentType | An incorrect argument type was specified in a function call in the SQL expression. | 400 | Client |
| IntegerOverflow | An integer overflow or underflow occurred in the SQL expression. | 400 | Client |
| InternalError | An internal error occurred. | 500 | Client |
| InvalidCast | An attempt to convert from one data type to another using CAST failed in the SQL expression. | 400 | Client |
| InvalidColumnIndex | The column index in the SQL expression is not valid. | 400 | Client |
| InvalidCompressionFormat | The file is not in a supported compression format. Only GZIP and BZIP2 are supported. | 400 | Client |
| InvalidDataSource | The data source type is not valid. Only CSV, JSON, and Parquet are supported. | 400 | Client |
| InvalidDataType | The SQL expression contains a data type that is not valid. | 400 | Client |
| InvalidExpressionType | The ExpressionType value is not valid. Only SQL expressions are supported. | 400 | Client |
| InvalidFileHeaderInfo | The FileHeaderInfo value is not valid. Only NONE, USE, and IGNORE are supported. | 400 | Client |
| InvalidJsonType | The JsonType value is not valid. Only DOCUMENT and LINES are supported. | 400 | Client |
| InvalidKeyPath | The key path in the SQL expression is not valid. | 400 | Client |
| InvalidQuoteFields | The QuoteFields value is not valid. Only ALWAYS and ASNEEDED are supported. | 400 | Client |
| InvalidRequestParameter | The value of a parameter in the SelectRequest element is not valid. Check the service API documentation and try again. | 400 | Client |
| InvalidScanRange | The provided scan range is not valid. | 400 | Client |
| InvalidTableAlias | The SQL expression contains a table alias that is not valid. | 400 | Client |
| InvalidTextEncoding | The encoding type is not valid. Only UTF-8 encoding is supported. | 400 | Client |
| JSONParsingError | An error occurred while parsing the JSON file. Check the file and try again. | 400 | Client |
| LexerInvalidChar | The SQL expression contains a character that is not valid. | 400 | Client |
| LexerInvalidIONLiteral | The SQL expression contains an operator that is not valid. | 400 | Client |
| LexerInvalidLiteral | The SQL expression contains an operator that is not valid. | 400 | Client |
| LexerInvalidOperator | The SQL expression contains a literal that is not valid. | 400 | Client |
| LikeInvalidInputs | The argument given to the LIKE clause in the SQL expression is not valid. | 400 | Client |
| MalformedXML | The XML provided was not well formed or did not validate against our published schema. Check the service documentation and try again. | 400 | Client |
| MaxOperatorsExceeded | Failed to parse SQL expression, try reducing complexity. For example, reduce number of operators used. | 400 | Client |
| MethodNotAllowed | The specified method is not allowed against this resource. | 405 Method Not Allowed | Client |
| MissingRequiredParameter | The SelectRequest entity is missing a required parameter. Check the service documentation and try again. | 400 | Client |
| MultipleDataSourcesUnsupported | Multiple data sources are not supported. | 400 | Client |
| NumberFormatError | An error occurred while parsing a number. This error can be caused by underflow or overflow of integers. | 400 | Client |
| ObjectSerializationConflict | InputSerialization specifies more than one format (CSV, JSON, or Parquet), or OutputSerialization specifies more than one format (CSV or JSON). For InputSerialization and OutputSerialization, you can specify only one format for each. | 400 | Client |
| OverMaxColumn | The number of columns in the result is greater than the maximum allowable number of columns. | 400 | Client |
| OverMaxParquetBlockSize | The Parquet file is above the max row group size. | 400 | Client |
| OverMaxRecordSize | The length of a record in the input or result is greater than the maxCharsPerRecord limit of 1 MB. | 400 | Client |
| ParquetParsingError | An error occurred while parsing the Parquet file. Check the file and try again. | 400 | Client |
| ParquetUnsupportedCompressionCodec | The specified Parquet compression codec is not supported. | 400 | Client |
| ParseAsteriskIsNotAloneInSelectList | Other expressions are not allowed in the SELECT list when \$1 is used without dot notation in the SQL expression. | 400 | Client |
| ParseCannotMixSqbAndWildcardInSelectList | Cannot mix [] and \$1 in the same expression in a SELECT list in the SQL expression. | 400 | Client |
| ParseCastArity | The SQL expression CAST has incorrect arity. | 400 | Client |
| ParseEmptySelect | The SQL expression contains an empty SELECT clause. | 400 | Client |
| ParseExpected2TokenTypes | The expected token in the SQL expression was not found. | 400 | Client |
| ParseExpectedArgumentDelimiter | The expected argument delimiter in the SQL expression was not found. | 400 | Client |
| ParseExpectedDatePart | The expected date part in the SQL expression was not found. | 400 | Client |
| ParseExpectedExpression | The expected SQL expression was not found. | 400 | Client |
| ParseExpectedIdentForAlias | The expected identifier for the alias in the SQL expression was not found. | 400 | Client |
| ParseExpectedIdentForAt | The expected identifier for AT name in the SQL expression was not found. | 400 | Client |
| ParseExpectedIdentForGroupName | GROUP is not supported in the SQL expression. | 400 | Client |
| ParseExpectedKeyword | The expected keyword in the SQL expression was not found. | 400 | Client |
| ParseExpectedLeftParenAfterCast | The expected left parenthesis after CAST in the SQL expression was not found. | 400 | Client |
| ParseExpectedLeftParenBuiltinFunctionCall | The expected left parenthesis in the SQL expression was not found. | 400 | Client |
| ParseExpectedLeftParenValueConstructor | The expected left parenthesis in the SQL expression was not found. | 400 | Client |
| ParseExpectedMember | The SQL expression contains an unsupported use of MEMBER. | 400 | Client |
| ParseExpectedNumber | The expected number in the SQL expression was not found. | 400 | Client |
| ParseExpectedRightParenBuiltinFunctionCall | The expected right parenthesis character in the SQL expression was not found. | 400 | Client |
| ParseExpectedTokenType | The expected token in the SQL expression was not found. | 400 | Client |
| ParseExpectedTypeName | The expected type name in the SQL expression was not found. | 400 | Client |
| ParseExpectedWhenClause | The expected WHEN clause in the SQL expression was not found. CASE is not supported. | 400 | Client |
| ParseInvalidContextForWildcardInSelectList | The use of \$1 in the SELECT list in the SQL expression is not valid. | 400 | Client |
| ParseInvalidPathComponent | The SQL expression contains a path component that is not valid. | 400 | Client |
| ParseInvalidTypeParam | The SQL expression contains a parameter value that is not valid. | 400 | Client |
| ParseMalformedJoin | JOIN is not supported in the SQL expression. | 400 | Client |
| ParseMissingIdentAfterAt | The expected identifier after the @ symbol in the SQL expression was not found. | 400 | Client |
| ParseNonUnaryAgregateFunctionCall | Only one argument is supported for aggregate functions in the SQL expression. | 400 | Client |
| ParseSelectMissingFrom | The SQL expression contains a missing FROM after the SELECT list. | 400 | Client |
| ParseUnExpectedKeyword | The SQL expression contains an unexpected keyword. | 400 | Client |
| ParseUnexpectedOperator | The SQL expression contains an unexpected operator. | 400 | Client |
| ParseUnexpectedTerm | The SQL expression contains an unexpected term. | 400 | Client |
| ParseUnexpectedToken | The SQL expression contains an unexpected token. | 400 | Client |
| ParseUnknownOperator | The SQL expression contains an operator that is not valid. | 400 | Client |
| ParseUnsupportedAlias | The SQL expression contains an unsupported use of ALIAS. | 400 | Client |
| ParseUnsupportedCallWithStar | Only COUNT with (\$1) as a parameter is supported in the SQL expression. | 400 | Client |
| ParseUnsupportedCase | The SQL expression contains an unsupported use of CASE. | 400 | Client |
| ParseUnsupportedCaseClause | The SQL expression contains an unsupported use of CASE. | 400 | Client |
| ParseUnsupportedLiteralsGroupBy | The SQL expression contains an unsupported use of GROUP BY. | 400 | Client |
| ParseUnsupportedSelect | The SQL expression contains an unsupported use of SELECT. | 400 | Client |
| ParseUnsupportedSyntax | The SQL expression contains unsupported syntax. | 400 | Client |
| ParseUnsupportedToken | The SQL expression contains an unsupported token. | 400 | Client |
| TruncatedInput | Object decompression failed. Check that the object is properly compressed using the format specified in the request. | 400 | Client |
| UnauthorizedAccess | You are not authorized to perform this operation. | 401 | Client |
| UnrecognizedFormatException | We encountered a record type that is not valid. | 400 | Client |
| UnsupportedFunction | We encountered an unsupported SQL function. | 400 | Client |
| UnsupportedParquetType | The specified Parquet type is not supported. | 400 | Client |
| UnsupportedRangeHeader | A range header is not supported for this operation. | 400 | Client |
| UnsupportedScanRangeInput | Scan range queries are not supported on this type of object. | 400 | Client |
| UnsupportedSqlOperation | We encountered an unsupported SQL operation. | 400 | Client |
| UnsupportedSqlStructure | We encountered an unsupported SQL structure. Check the SQL Reference. | 400 | Client |
| UnsupportedStorageClass | We encountered a storage class that is not supported. Only STANDARD, STANDARD\$1IA, and ONEZONE\$1IA storage classes are supported. | 400 | Client |
| UnsupportedSyntax | We encountered syntax that is not valid. | 400 | Client |
| UnsupportedTypeForQuerying | Your query contains an unsupported type for comparison (e.g. verifying that a Parquet INT96 column type is greater than 0). | 400 | Client |
| ValueParseFailure | A timestamp parse failure occurred in the SQL expression. | 400 | Client |
## List of Replication-related error codes
The following table contains special errors that the `Replication` operation might return. For general information about Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error code | Description | HTTP status code | SOAP fault code prefix |
| --- | --- | --- | --- |
| InvalidArgument | This error might occur for the following reasons: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html) | 400 | Client |
| InvalidRequest | This error might occur for the following reasons: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html) | 400 | Client |
| ReplicationConfigurationNotFoundError | There is no replication configuration for this bucket. | 404 Not Found | Client |
## List of Tagging-related error codes
The following table contains special errors that the `TagResource`, `UntagResource`, and `ListTagsForResource` operations might return for Storage Lens groups. For general information about general Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error Code | Description | HTTP Status Code | SOAP Fault Code Prefix |
| --- | --- | --- | --- |
| InvalidRequest | The AWS Region in the resource ARN doesn't match the Region that's specified in this request. The AWS account in the resource ARN doesn't match the account ID that's specified in this request. The AWS partition in the resourceArn is invalid. | 400 Bad Request | Not supported |
| InvalidTag | This request contains a tag key or value that isn't valid. Valid characters include the following: `[a-zA-Z+-=._:/]`. Tag keys can contain up to 128 characters. Tag values can contain up to 256 characters. There are duplicate tag keys in your request. User-defined tag keys can't start with `aws:`. | 400 Bad Request | Not supported |
| NoSuchResource | The specified resource doesn't exist. | 404 Not Found | Not supported |
| TagPolicyException | The tag policy does not allow the specified value for the following tag key. | 400 Bad Request | Not supported |
| TooManyTags | The number of tags exceeds the limit of 50 tags. | 400 Bad Request | Not supported |
## List of Amazon S3 on Outposts error codes
The following table contains special errors that an Amazon S3 on Outposts operation might return. For general information about Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error code | Description | HTTP status code | SOAP fault code prefix |
| --- | --- | --- | --- |
| BadRequest | The bucket is in a transitional state because of a previous deletion attempt. Try again later. | 400 Bad Request | Not supported |
| InvalidRequest | This error might occur for the following reasons: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html) | 400 Bad Request | Client |
| InvalidOutpostState | The request is not valid for the current state of the Outpost. | 409 Conflict | Not supported |
| InvalidRequest | The access point is not in a state where it can be deleted. | 400 Bad Request | Not supported |
| NoSuchOutpost | The specified Outpost does not exist. | 404 Not Found | Not supported |
| UnsupportedOperation | The specified action was not supported. | 404 Not Found | Not supported |
| InsufficientCapacity | Insufficient capacity. | 507 Insufficient Storage | Not supported |
## List of Amazon S3 Storage Lens error codes
The following table contains special errors that Amazon S3 Storage Lens operations might return. For general information about general Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error code | Description | HTTP status code | SOAP fault code prefix |
| --- | --- | --- | --- |
| AccessDenied | This Region is not supported as a home Region for S3 Storage Lens. | 403 Forbidden | Not supported |
| AccountNotAuthorized | This account not authorized to use AWS Organizations. Use your management account or delegated administrator account. | 403 Forbidden | Not supported |
| ActivityMetricsMustEnabled | Activity metrics must be enabled. | 400 Bad Request | Not supported |
| AWSOrganizationsNotInUseException | This account is not part of your organization. | 403 Forbidden | Not supported |
| DefaultConfigurationDeleteForbidden | The Default configuration cannot be deleted. | 403 Forbidden | Not supported |
| DuplicateStorageLensGroupARN | There are two or more entries of the same Storage Lens group ARN in this configuration. | 400 Bad Request | Not supported |
| EmptyExcludeContainer | This error occurs for the following reasons: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html) | 400 Bad Request | Not supported |
| EmptyExcludeElement | You must specify a Storage Lens group with your Exclude element. | 400 Bad Request | Not supported |
| EmptyIncludeContainer | This error occurs for the following reasons: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html) | 400 Bad Request | Not supported |
| InvalidAWSOrgArn | There is a malformed AWS Organizations ARN in the configuration. | 400 Bad Request | Not supported |
| EmptyIncludeElement | You must specify a Storage Lens group with your Include element. | 400 Bad Request | Not supported |
| InvalidBucketFilter | Organization-level configurations do not support bucket filters. | 400 Bad Request | Not supported |
| InvalidConfigId | The configuration ID is not valid. | 400 Bad Request | Not supported |
| InvalidDestination | The S3 bucket ARN is malformed. | 400 Bad Request | Not supported |
| InvalidEncryptionMethod | Only one encryption method can be specified. | 400 Bad Request | Not supported |
| InvalidFilterForDefaultConfiguration | The default configuration must not include any filters. | 400 Bad Request | Not supported |
| InvalidIncludeExcludeContainers | You can specify either an Include container or an Exclude container in a configuration. You cannot specify both in a configuration. | 400 Bad Request | Not supported |
| InvalidIncludeExcludeElements | Only one Include or Exclude element is allowed. At least one Include or Exclude element must be present. | 400 Bad Request | Not supported |
| InvalidKMSEncryptionKeyId | The KMS key ID ARN is not valid. | 400 Bad Request | Not supported |
| InvalidMaximumPrefixDepth | `MaxDepth` must be within the range [1,10]. | 400 Bad Request | Not supported |
| InvalidMinimumStorageBytesPercentage | `MinStorageBytesPercentage` must be within the range [1.00,100.00]. | 400 Bad Request | Not supported |
| InvalidOrganizationARN | The AWS Organizations ARN in the configuration is not valid. | 400 Bad Request | Not supported |
| InvalidOrganizationForDefaultConfiguration | The default configuration does not support organization-level metrics. | 400 Bad Request | Not supported |
| InvalidRegionForDefaultConfiguration | The specified Region is not supported for default configuration. | 400 Bad Request | Not supported |
| InvalidRegionName | The Region name is not valid. | 400 Bad Request | Not supported |
| InvalidStorageLensArn | The S3 Storage Lens ARN is not required in input. | 400 Bad Request | Not supported |
| InvalidStorageLensGroupARN | This Storage Lens group ARN isn't valid or only Storage Lens groups in your account are allowed. Additionally, you must follow the Storage Lens group ARN structure: `arn::s3:::storage-lens-group/` and adhere to the 64 character limit. Storage Lens group names can also contain only the following characters: a-z, A-Z, 0-9, hyphens (-), and underscores (\$1). | 400 Bad Request | Not supported |
| MissingAccountLevelActivityMetrics | Activity metrics must be enabled at the account level when activity metrics are enabled at the bucket level. | 400 Bad Request | Not supported |
| MissingBucketLevelActivityMetrics | Activity metrics must be enabled at the bucket level when activity metrics are enabled at the account level. | 400 Bad Request | Not supported |
| MissingEncryptionMethod | The encryption method cannot be blank. Specify either `SSE-KMS` or `SSE-S3`. | 400 Bad Request | Not supported |
| MissingPrefixLevelStorageMetrics | Storage metrics at the prefix level are mandatory when the prefix level is enabled. | 400 Bad Request | Not supported |
| OrganizationAccessDenied | This account is not authorized to add AWS Organizations. | 403 Forbidden | Not supported |
| OrgConfigurationNotSupported | The specified Region does not support AWS Organizations in the configuration. | 403 Forbidden | Not supported |
| ServiceNotEnabledForOrg | The S3 Storage Lens service-linked role is not enabled for the organization. | 403 Forbidden | Not supported |
| StorageMetricsMustEnabled | Prefix-level storage metrics must be enabled. | 400 Bad Request | Not supported |
| TooManyBuckets | The buckets container cannot have more than 50 buckets. | 400 Bad Request | Not supported |
| TooManyRegions | The Regions container cannot have more than 50 Regions. | 400 Bad Request | Not supported |
| TooManyStorageLensGroups | You can't attach more than 50 Storage Lens groups to your Storage Lens dashboard. | 400 Bad Request | Not supported |
The following table contains special errors that S3 Storage Lens groups operations might return. For general information about general Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error code | Description | HTTP status code | SOAP fault code prefix |
| --- | --- | --- | --- |
| AccessDenied | You don't have permission to perform Storage Lens group actions. This Region is not supported as home Region for S3 Storage Lens groups. | 403 Forbidden | Not supported |
| ConfigurationAlreadyExists | The specified configuration already exists. | 409 Conflict | Not supported |
| DuplicateElement | Tags must be unique. The `And` logical operator includes duplicate tag keys. The `Or` logical operator includes duplicate tags. Logical operator includes duplicate prefixes or suffixes. | 400 Bad Request | Not supported |
| InvalidAge | `DaysLessThan` and `DaysGreaterThan` must be positive numbers. | 400 Bad Request | Not supported |
| InvalidFilter | A filter must include one of the following elements: `And`, `Or`, `MatchAnyTag`, `MatchAnyPrefix`, `MatchAnySuffix`, `MatchObjectAge`, `MatchObjectSize`. | 400 Bad Request | Not supported |
| InvalidLogicalOperator | At least two sub elements must be present in the logical operators `And` or `Or`. | 400 Bad Request | Not supported |
| InvalidMatchAnyPrefix | The `MatchAnyPrefix` parameter can’t be empty. | 400 Bad Request | Not supported |
| InvalidMatchAnySuffix | The `MatchAnySuffix` parameter can't be empty. | 400 Bad Request | Not supported |
| InvalidMatchAnyTag | The `MatchAnyTag` parameter can't be empty. | 400 Bad Request | Not supported |
| InvalidMatchObjectAge | The `MatchObjectAge` parameter can't be empty. | 400 Bad Request | Not supported |
| InvalidMatchObjectSize | The `MatchObjectSize` parameter can't be empty. | 400 Bad Request | Not supported |
| InvalidName | Storage Lens group Name parameter must be between 1 and 64 characters. The Storage Lens group `Name` parameter must use the `^[a-zA-Z0-9\-_]+$` pattern. | 400 Bad Request | Not supported |
| InvalidNumericCombination | This object age or object size combination isn't valid. | 400 Bad Request | Not supported |
| InvalidPrefix | The maximum length of a prefix is 1,024 characters. The prefix string can't be empty. | 400 Bad Request | Not supported |
| InvalidSize | `BytesLessThan` and `BytesGreaterThan` must be positive numbers. The maximum object size can't exceed 50 TB. The minimum object size can't be greater than or equal to 50 TB. | 400 Bad Request | Not supported |
| InvalidSuffix | The maximum length of a suffix is 1,024 characters. The suffix string can't be empty. | 400 Bad Request | Not supported |
| InvalidTag | The object tag key can’t exceed 128 characters. The object tag key string can't be null or empty. The maximum length of a tag value is 256 characters. The object tag key contains characters that aren't valid. The object tag key must contain only a-z, A-Z, 0-9, spaces, and the following characters: `^(_.:/=+\-@]*)$`. | 400 Bad Request | Not supported |
| MismatchedName | The name specified in the request doesn't match the Storage Lens group name. | 400 Bad Request | Not supported |
| TooManyConfigurations | You have attempted to create more Storage Lens group configurations than the 50 allowed. | 400 Bad Request | Not supported |
| TooManyElements | The `Element` exceeds the maximum number of elements allowed within a logical operator. Only 10 prefixes, suffixes, or tags are allowed. | 400 Bad Request | Not supported |
## List of Amazon S3 Object Lambda error codes
The following table contains special errors that S3 Object Lambda might return. For information about general Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
Error responses received from the supporting access points during non-`GetObject` requests are sent to the caller unaltered.
| Error code | Description | HTTP status code |
| --- | --- | --- |
| LambdaInvalidResponse | Returned to the original caller when `WriteGetObjectResponse` responds with `ValidationError` to AWS Lambda. See the `ValidationError` message for more details. Not all cases of `ValidationError` result in a `LambdaInvalidResponse` error. | 400 Bad Request |
| LambdaInvocationFailed | Lambda function invocation failed. Callers might receive the following error when S3 Object Lambda is unable to successfully invoke the configured Lambda function. The error message might contain details about an eventual error returned by the AWS Lambda service when invoking the function (for example, status code, error code, error message and request ID). | 400 Bad Request |
| LambdaNotFound | The AWS Lambda function was not found.The configured Lambda function, version, or alias was not found when attempting to invoke it. Ensure that the S3 Object Lambda Access Point configuration points to the correct Lambda function ARN.The error message might contain details about an eventual error returned by the AWS Lambda service when invoking the function (for example, status code, error code, error message and request ID). | 404 Not Found |
| LambdaPermissionError | The caller is not authorized to invoke the Lambda function. The caller must have permission to invoke the Lambda function. Check the policies attached to the caller and ensure that they've been allowed to use `lambda:Invoke` for the configured function. The error message might contain details about an eventual error returned by the AWS Lambda service when invoking the function (for example, status code, error code, error message and request ID). | 403 Forbidden |
| LambdaResponseNotReceived | The Lambda function exited without successfully calling `WriteGetObjectResponse`.`GetObject` response data is provided by the Lambda function by calling the `WriteGetObjectResponse` API operation. The Amazon CloudWatch logs for the function might provide more insight into why the function did not successfully call this API operation despite exiting normally. | 500 Internal Service Error |
| LambdaRuntimeError | The Lambda function failed during execution.An explicit error was received from the Lambda function. For details about the failure, check the AWS CloudFormation logs. | 500 Internal Service Error |
| LambdaTimeout | The Lambda function did not respond in the allowed time.The Lambda function failed to complete its call to `WriteGetObjectResponse` within 60 seconds. | 500 Internal Service Error |
| SlowDown | Reduce your request rate for operations involving AWS Lambda.The function invocation was throttled by AWS Lambda, perhaps because it has reached its configured concurrency limitation. For more information, see [Managing concurrency for a Lambda function](https://docs.aws.amazon.com/lambda/latest/dg/configuration-concurrency.html) in the *AWS Lambda Developer Guide*.The error message might contain details about an eventual error returned by the AWS Lambda service when invoking the function (for example, status code, error code, error message and request ID). | 503 Slow Down |
| ValidationError | Validation errors might be returned from the `WriteGetObjectResponse` API operation and can occur for numerous reasons. See the error message for more details. | 400 Bad Request |
## List of Amazon S3 asynchronous error codes
The following table contains special errors that asynchronous requests might return. For general information about Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
These errors are returned when you query about the state of an asynchronous request, such as by using `DescribeMultiRegionAccessPointOperation`. Because these requests are asynchronous, all of these errors have a status code of `200 OK`.
| Error code | Description | HTTP status code |
| --- | --- | --- |
| AccessDenied | Access denied. | 200 OK |
| InternalErrors | An internal server error occurred. | 200 OK |
| MalformedPolicy | The specified policy syntax is not valid. | 200 OK |
| MultiRegionAccessPointAlreadyOwnedByYou | You already have a Multi-Region Access Point with the same name. | 200 OK |
| MultiRegionAccessPointModifiedByAnotherRequest | The action failed because another request is modifying the specified resource. Try resubmitting your request after the previous request has been completed. | 200 OK |
| MultiRegionAccessPointNotReady | The specified Multi-Region Access Point is not ready to be updated. | 200 OK |
| MultiRegionAccessPointSameBucketRegion | The buckets used to create a Multi-Region Access Point cannot be in the same Region. | 200 OK |
| MultiRegionAccessPointUnsupportedRegion | One of the buckets supplied to create the Multi-Region Access Point is in a Region that is not supported. | 200 OK |
| NoSuchBucket | The specified bucket does not exist. | 200 OK |
| NoSuchMultiRegionAccessPoint | The specified Multi-Region Access Point does not exist. | 200 OK |
## List of Amazon S3 Access Grants error codes
The following table contains special errors that S3 Access Grants requests might return. For general information about Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error Code | Description | HTTP Status Code |
| --- | --- | --- |
| AccessGrantAlreadyExists | The specified access grant already exists | 409 |
| AccessGrantsInstanceAlreadyExists | Access Grants Instance already exists | 409 |
| AccessGrantsInstanceNotEmptyError | Please clean up locations before deleting the access grants instance | 400 |
| AccessGrantsInstanceNotExistsError | Access Grants Instance does not exist | 404 |
| AccessGrantsInstanceResourcePolicyNotExists | Access Grants Instance Resource Policy does not exist | 404 |
| AccessGrantsLocationAlreadyExistsError | The specified access grants location already exists | 409 |
| AccessGrantsLocationNotEmptyError | Please clean up access grants before deleting access grants location | 400 |
| AccessGrantsLocationsQuotaExceededError | The access grants location quota has been exceeded. Access Grants Locations Quota: **. Please reach out to S3 if an increase is required. | 409 |
| AccessGrantsQuotaExceededError | The access grants quota has been exceeded. Access Grants Quota: **. Please reach out to S3 if an increase is required. | 409 |
| InvalidTag | There are duplicate tag keys in your request. Remove the duplicate tag keys and try again. | 400 |
| InvalidAccessGrant | The specified Access Grant is invalid | 400 |
| InvalidAccessGrantsLocation | The specified Access Grants Location is invalid | 400 |
| InvalidIamRole | The specified IAM Role is invalid | 400 |
| InvalidIdentityCenterInstance | The specified identity center instance is invalid | 400 |
| InvalidResourcePolicy | The specified Resource Policy is invalid | 400 |
| InvalidResourcePolicy | The specified Resource Policy is invalid | 400 |
| InvalidTag | This request contains a tag key or value that isn't valid. Valid characters include the following: [a-zA-Z\$1-=.\$1:/]. Tag keys can contain up to 128 characters. Tag values can contain up to 256 characters. | 400 |
| NoSuchAccessGrantError | The specified access grant does not exist | 404 |
| NoSuchAccessGrantsLocationError | The specified access grants location does not exist | 404 |
| AccessDenied | You do not have permissions to the requested S3 Prefix: | 403 Forbidden |
| StsNotAuthorizedError | An error occurred (`StsNotAuthorizedError`) when calling the GetDataAccess operation: User: `access-grants.s3.amazonaws.com` is not authorized to perform: `sts:AssumeRole` on resource: ** | 403 |
| StsPackedPolicyTooLargeError | An error occurred (`StsPackedPolicyTooLargeError`) when calling the GetDataAccess operation: Serialized token too large for session | 400 |
| StsValidationError | *The error message varies depending on the validation error.* | 400 |
| InvalidTags | Tag keys cannot start with AWS reserved prefix for system tags." | 400 |
| TooManyTags | The number of tags exceeds the limit of 50 tags. Remove some tags and try again. | 400 |
## List of Amazon FSx-related error codes
The following table contains special errors that requests made to Amazon FSx through an Amazon S3 access point might return. For general information about Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error Code | Description | HTTP Status Code |
| --- | --- | --- |
| AccessDenied | This error might occur for the following reasons: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html) | 403 Forbidden |
| InsufficientCapacity | Maximum storage capacity of file system has been reached. | 507 Insufficient Capacity |
| InvalidKey | The specified key is not valid. | 400 Bad Request |
| SlowDown | Please reduce your request rate. | 503 Slow Down |
## List of Amazon S3 Tables error codes
The following table contains special errors that Amazon S3 Tables operations might return. For general information about Amazon S3 errors and a list of error codes, see [Error responses](#ErrorResponses).
| Error Code | Description | HTTP Status Code |
| --- | --- | --- |
| AccessDeniedException | The action cannot be performed because you do not have the required permission. | 403 Forbidden |
| BadRequestException | The request is invalid or malformed. | 400 Bad Request |
| ConflictException | The request failed because there is a conflict with a previous write. You can retry the request. | 409 Conflict |
| ForbiddenException | The caller isn't authorized to make the request. | 403 Forbidden |
| InternalServerErrorException | The request failed due to an internal server error. | 500 Internal Server Error |
| NotFoundException | The request was rejected because the specified resource could not be found. | 404 Not Found |
| TooManyRequestsException | The limit on the number of requests per second was exceeded. | 429 Too Many Requests |
# Amazon S3 error best practices
Many error responses contain additional structured data meant to be read and understood by a developer diagnosing programming errors. For example, if you send a Content-MD5 header with a REST PUT request that doesn't match the digest calculated on the server, you receive a BadDigest error. The error response also includes as detail elements the digest we calculated, and the digest you told us to expect. During development, you can use this information to diagnose the error. In production, a well-behaved program might include this information in its error log.
When designing an application for use with Amazon S3, it is important to handle Amazon S3 errors appropriately. This section describes issues to consider when designing your application.
## Retry InternalErrors
Internal errors are errors that occur within the Amazon S3 environment.
Requests that receive an InternalError response might not have processed. For example, if a PUT request returns InternalError, a subsequent GET might retrieve the old value or the updated value.
If Amazon S3 returns an InternalError response, retry the request.
## Tune application for repeated SlowDown errors
As with any distributed system, S3 has protection mechanisms which detect intentional or unintentional resource over-consumption and react accordingly. SlowDown errors can occur when a high request rate triggers one of these mechanisms. Reducing your request rate will decrease or eliminate errors of this type. Generally speaking, most users will not experience these errors regularly; however, if you would like more information or are experiencing high or unexpected SlowDown errors, please post to our [Amazon S3 developer forum](https://forums.aws.amazon.com/) or sign up for Support [https://aws.amazon.com/premiumsupport/](https://aws.amazon.com/premiumsupport/).
## Isolate errors
**Note**
SOAP APIs for Amazon S3 are not available for new customers, and are approaching End of Life (EOL) on October 31, 2025. We recommend that you use either the REST API or the AWS SDKs.
Amazon S3 provides a set of error codes that are used by both the SOAP and REST API. The SOAP API returns standard Amazon S3 error codes. The REST API is designed to look like a standard HTTP server and interact with existing HTTP clients (e.g., browsers, HTTP client libraries, proxies, caches, and so on). To ensure the HTTP clients handle errors properly, we map each Amazon S3 error to an HTTP status code.
HTTP status codes are less expressive than Amazon S3 error codes and contain less information about the error. For example, the `NoSuchKey` and `NoSuchBucket` Amazon S3 errors both map to the `HTTP 404 Not Found` status code.
Although the HTTP status codes contain less information about the error, clients that understand HTTP, but not the Amazon S3 API, will usually handle the error correctly.
Therefore, when handling errors or reporting Amazon S3 errors to end users, use the Amazon S3 error code instead of the HTTP status code as it contains the most information about the error. Additionally, when debugging your application, you should also consult the human readable element of the XML error response.