AWS KMS client not returning an alias name

Question

I've been using the list_aliases() method of KMS client since a while now without any issues. But recently it has stopped listing one of the alias names I want to use.

import boto3

kms_client = boto3.client('kms')

# Getting all the aliases from my KMS
key_aliases = kms_client.list_aliases()

key_aliases = key_aliases['Aliases']

# DO SOMETHING...

The key_aliases list above contains all the keys except the one I want to use. However, I can see from the AWS KMS UI that the key is enabled. Not sure why the list_aliases() method is not returning it.

Has anyone faced this problem?

Answer 1

It looks like the response is truncated. The default number of aliases fetched by this API call is 50. You can increase the limit up to 100, which should solve your problem.

key_aliases = kms_client.list_aliases(Limit=100)

You should also check if the truncated field in the response is set to True. In that case, you can just make another API call to fetch the remaining results:

if key_aliases['Truncated'] is True:
   key_aliases = kms_client.list_aliases(Marker=key_aliases['NextMarker'])
   ...