<!-- 0Gkit docs — WALLET_KMS_SIGN_FAILED
     Source: https://docs.0gkit.com/errors/WALLET_KMS_SIGN_FAILED
     LLM-friendly Markdown twin of the page. -->

# WALLET_KMS_SIGN_FAILED

**AWS KMS Sign returned no signature**

## What happened

The AWS KMS `Sign` API call succeeded but returned an empty `Signature` field. Almost always indicates a misconfigured KMS key (wrong KeySpec, wrong KeyUsage, or missing permissions).

## How to fix

Confirm the KMS key has `KeySpec: ECC_SECG_P256K1` and `KeyUsage: SIGN_VERIFY`, and that your IAM role has `kms:Sign` permission. Re-run with `AWS_SDK_DEBUG=1` for raw KMS response logs.

## Example

```ts
import { fromKMS } from "@foundryprotocol/0gkit-wallet";
const signer = await fromKMS({ keyId: "arn:aws:kms:..." });
```

## Reference

- Namespace: `WALLET`
- Help URL: `https://0gkit.com/errors/WALLET_KMS_SIGN_FAILED`
- See also: [all error codes](/errors)