Error AtlasError Documentation and ResolutionAWS documented errors
Browse documented AWS errors grouped by service and API surface, with exact error messages, likely causes, and practical remediation steps.
Tool
AWS Management Console
Access denied when connecting to the AWS Management ConsoleAWS Management Console access was denied because policy conditions no longer matchauthentication: AWS Management Console access can fail when IAM policies use `aws:SourceIp` or `aws:SourceVpc` conditions that no longer match how console traffic reaches AWS.
504 Gateway TimeoutAWS Management Console returned 504 Gateway Timeoutnetworking: The AWS Management Console can return 504 Gateway Timeout during regional service disruption or when the current console endpoint is unavailable for the selected Region.
Tool
General
OptInRequiredAWS account is not subscribed to the servicegeneral: AWS rejected the request because the account is not subscribed to or opted in for the requested service or feature.
AccessDeniedExceptionAWS API request failed with AccessDeniedExceptionauthentication: AWS rejected the request because the caller is not authorized to perform the action, often due to IAM policy, resource policy, or missing permissions.
InvalidActionAWS API request used an invalid actiongeneral: AWS could not recognize the API action requested, usually because the action name is wrong, the endpoint is incorrect, or the request targets the wrong service.
UnrecognizedClientExceptionAWS did not recognize the client credentials in the requestauthentication: AWS rejected the request because the access key, certificate, or security credentials in the request do not exist in its records or are not valid for the call.
UnknownOperationExceptionAWS received an unknown or invalid operation nameconfiguration: AWS could not route the request because the requested action or operation name is invalid for the endpoint or API being called.
RequestEntityTooLargeExceptionAWS rejected the request because the request entity is too largenetworking: AWS rejected the request at the HTTP layer because the request payload exceeds the size limit accepted by the target endpoint.
RequestExpiredAWS request expired because the timestamp was too oldgeneral: AWS rejected the signed request because its timestamp was too far from the current AWS server time, which usually points to clock skew on the client.
ServiceUnavailableAWS request failed because the service was unavailablegeneral: AWS returned ServiceUnavailable because the server was temporarily unable to handle the request.
InternalFailureAWS request failed with InternalFailuregeneral: AWS failed to process the request because of an internal error or temporary service-side failure.
NotAuthorizedAWS request failed with NotAuthorizedauthentication: AWS rejected the request because the caller is not authorized to perform the action, typically due to IAM policy or account-level restrictions.
ValidationErrorAWS request failed with ValidationErrorgeneral: AWS rejected the request because one or more input values did not satisfy the service constraints for the operation.
MalformedHttpRequestExceptionAWS request is malformed at the HTTP levelgeneral: AWS rejected the request because the HTTP request itself is malformed, such as an invalid body encoding or decompression mismatch.
MissingParameterAWS request is missing a required parametergeneral: AWS rejected the request because a required parameter for the target API operation was not included.
MissingAuthenticationTokenAWS request is missing an authentication tokenauthentication: AWS rejected the request because an authentication token or signature expected by the API was missing.
MissingActionAWS request is missing the action parametergeneral: AWS rejected the query-style request because the required action or operation name was not supplied.
IncompleteSignatureAWS request signature does not conform to standardsauthentication: AWS could not validate the request signature because the signing data is malformed, incomplete, or inconsistent with the expected AWS signing standard.
SignatureDoesNotMatchAWS request signature does not matchauthentication: AWS rejected the signed request because the signature calculated by AWS does not match the signature sent by the client.
InvalidParameterCombinationAWS request used an invalid parameter combinationgeneral: AWS rejected the request because two or more supplied parameters are incompatible with each other for the target API operation.
InvalidParameterValueAWS request used an invalid parameter valuegeneral: AWS rejected the request because one of the supplied parameter values is invalid for the operation or outside the allowed constraints.
RequestAbortedExceptionAWS request was aborted before the service returned a replynetworking: AWS did not complete the request because the connection was aborted before a response could be sent, often because the client disconnected or the request stream was interrupted.
ThrottlingExceptionAWS request was throttledgeneral: AWS throttled the request because the caller exceeded the allowed rate or burst limits for the target API or service operation.
ExpiredTokenExceptionAWS security token in the request is expiredauthentication: AWS rejected the request because the temporary security token included with the request is expired.
InvalidClientTokenIdAWS security token included an invalid client token IDauthentication: AWS could not validate the access key or token identifier in the request, which usually means the credentials are wrong, inactive, or belong to a different context.
RequestTimeoutExceptionAWS timed out while reading the requestnetworking: AWS could not complete the request because reading the HTTP request timed out before the full payload or request data arrived.