Got java.lang.NoClassDefFoundError: KmsClient when set up S3EncryptionClient

[hieuwu]

Security issue notifications

N/A

Problem:

Got exception when run test and run application when provide S3EncryptionClient with kms

Caused by: java.lang.NoClassDefFoundError: software/amazon/awssdk/services/kms/KmsClient
	at software.amazon.encryption.s3.S3EncryptionClient$Builder.build(S3EncryptionClient.java:1142)

The root cause of the problem is that kmsClient class comes from different dependencies, while other type of security key is in the same package of the SDK.

How to reproduce:

1. Add the dependency
   implementation("software.amazon.encryption.s3:amazon-s3-encryption-client-java:3.3.0")
2. Create a configuration class

@Configuration
class S3Configuration {
    @Bean
    fun s3Client(): S3Client {
        return S3EncryptionClient.builder()
            .kmsKeyId("sdfdsfds")
            .region(Region.AP_SOUTHEAST_2).build()
    }
}

4. Start the application or test with ./gradlew startBootRun or ./gradlew runTest
   The exception is throw when the application actually runs.

Solution:

• Check for existence of KmsClient class when kmsKeyId is set. This would help developer easier to troubleshoot the problem & take proper action
• Update document to emphasize the dependency they need to add when use kmsKeyId

Out of scope:

Is there anything the solution will intentionally NOT address?