rustfs/rustfs · error · Error::ContainsReservedChars

access key contains reserved characters =,

Error message

access key contains reserved characters =,

What it means

IAM validation guard meaning the access key contains characters reserved by the IAM store's key-value encoding ('=' or ','). Because identities are serialized as k=v,comma lists, those characters would corrupt round-tripping, so account creation is rejected at the boundary; callers surface it as InvalidArgument telling the operator to pick a different access key.

Source

Thrown at crates/iam/src/error.rs:71

    #[error("policy in use")]
    PolicyInUse,

    #[error("group not empty")]
    GroupNotEmpty,

    #[error("invalid arguments specified")]
    InvalidArgument,

    #[error("not initialized")]
    IamSysNotInitialized,

    #[error("invalid access key length")]
    InvalidAccessKeyLength,

    #[error("invalid secret key length")]
    InvalidSecretKeyLength,

    #[error("access key contains reserved characters =,")]
    ContainsReservedChars,

    #[error("group name contains reserved characters =,")]
    GroupNameContainsReservedChars,

    #[error("access key is already in use")]
    AccessKeyAlreadyExists,

    #[error("action not allowed")]
    IAMActionNotAllowed,

    #[error("no secret key with access key")]
    NoSecretKeyWithAccessKey,

    #[error("no access key with secret key")]
    NoAccessKeyWithSecretKey,

    #[error("policy too large")]

View on GitHub (pinned to 35af688cd9)

Solutions

1. Choose an access key without '=' or ','
2. Reject such keys at the API boundary

When it happens

Trigger: Thrown at crates/iam/src/error.rs:71 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of rustfs/rustfs@35af688cd9 (2026-08-20). Data as JSON: /api/errors/45cb00d87e2d634d. Report an issue: GitHub.