Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-17-2025 12:44 PM - edited 06-17-2025 12:47 PM
Hey,
We just established new environment based on AWS. Our first step was to create Cluster but while doing so, we have encountered an error. We tried different policies, configurations and instance types. All resulted in:
Aws Invalid Kms Key State:
The VM was terminated due to invalid KMS key. [details] Client.InvalidKMSKey.InvalidState: Client.InvalidKMSKey.InvalidState: The KMS key provided is in an incorrect state(OnDemand)Any clues how to fix it? What part of config I did messed up? 🙂
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2025 07:41 AM
Hi @xx123 ,
The error indicates that the AWS KMS key used for encryption is either misconfigured or missing required permissions.
- Make sure the KMS key is enabled
- Verify that the KMS key and your Databricks workspace are in the same AWS region
- Update the key policy to include your Databricks cross-account IAM role with the following permissions:
kms:CreateGrant, kms:Decrypt, kms:GenerateDataKey*, kms:DescribeKey - Ensure the IAM role ARN is properly included in the key policy
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-25-2025 01:02 PM
