@aws-sdk/client-kms : Error decrypting data: TypeError: Cannot read properties of undefined (reading 'byteLength')

[DhirajAswani]

I am using s3 and kms with aws-sdk v3 nodejs 18.

I have uploaded a file to s3 with this command - aws s3 cp config.json s3://lambda-config --sse aws:kms --sse-kms-key-id "my_kms_key_id"

So now I have a file with name - config.json in S3 bucket (lambda-config)

Now I am trying to fetch config.json file from S3 and decrypt with KMS using AWS-SDK v3 in nodejs 18

ERROR:

Error decrypting data: TypeError: Cannot read properties of undefined (reading 'byteLength')
at fromArrayBuffer (/Users/daswani/node_modules/@smithy/util-buffer-from/dist-cjs/index.js:6:60)
at toBase64 (/Users/daswani/node_modules/@smithy/util-base64/dist-cjs/toBase64.js:5:68)
at applyInstruction (/Users/daswani/node_modules/@smithy/smithy-client/dist-cjs/object-mapping.js:73:33)
at take (/Users/daswani/node_modules/@smithy/smithy-client/dist-cjs/object-mapping.js:44:9)
at se_DecryptRequest (/Users/daswani/node_modules/@aws-sdk/client-kms/dist-cjs/protocols/Aws_json1_1.js:3327:37)
at se_DecryptCommand (/Users/daswani/node_modules/@aws-sdk/client-kms/dist-cjs/protocols/Aws_json1_1.js:54:27)
at serialize (/Users/daswani/node_modules/@aws-sdk/client-kms/dist-cjs/commands/DecryptCommand.js:41:52)
at /Users/daswani/node_modules/@smithy/middleware-serde/dist-cjs/serializerMiddleware.js:12:27
at /Users/daswani/node_modules/@smithy/middleware-endpoint/dist-cjs/endpointMiddleware.js:20:16

Code Example for above error

const { S3Client, GetObjectCommand } = require("@aws-sdk/client-s3");
const { KMSClient, DecryptCommand } = require("@aws-sdk/client-kms");
const fs = require('fs');

const s3Client = new S3Client({ region: 'ap-south-1' }); 
const kmsClient = new KMSClient({ region: 'ap-south-1' }); 

const s3Bucket = 'lambda-config';
const s3ObjectKey = 'config.json';

const keyId = 'my_kms_key_id';

async function fetchFileFromS3(bucket, objectKey) {
  const getObjectParams = {
    Bucket: bucket,
    Key: objectKey
  };

  try {
    const getObjectCommand = new GetObjectCommand(getObjectParams);
    const { Body } = await s3Client.send(getObjectCommand);
    return Body;
  } catch (error) {
    console.error('Error fetching file from S3:', error);
    throw error;
  }
}

async function decryptData(encryptedData) {
  const decryptParams = {
    CiphertextBlob: encryptedData
  };

  try {
    const decryptCommand = new DecryptCommand(decryptParams);
    const { Plaintext } = await kmsClient.send(decryptCommand);
    return Plaintext.toString('base64');
  } catch (error) {
    console.error('Error decrypting data:', error);
    throw error;
  }
}

const outputFilePath = 'decrypted.txt';

fetchFileFromS3(s3Bucket, s3ObjectKey)
  .then(async (fileData) => {
    const decryptedData = await decryptData(fileData);

    fs.writeFileSync(outputFilePath, decryptedData, 'base64');
    console.log('Decrypted data written to', outputFilePath);
  })
  .catch(error => {
    console.error('An error occurred:', error);
  });

[yenfryherrerafeliz]

Hi @DhirajAswani, can you please let me know which SDK minor version are you using?. If is not the latest version of the SDK, would you be able to please update to the latest and see if the behavior persist there?. The current latest version is v3.411.o as of today.

Please let me know.

Thanks!

[DhirajAswani]

Hi @yenfryherrerafeliz,

Thanks for the reply.

I am using below aws-sdk versions,

├── @aws-sdk/[email protected]
└── @aws-sdk/[email protected]

S3 -> https://www.npmjs.com/package/@aws-sdk/client-s3
KMS -> https://www.npmjs.com/package/@aws-sdk/client-kms

Getting below error while installing 3.411.0 version

npm ERR! code ETARGET
npm ERR! notarget No matching version found for @aws-sdk/[email protected].
npm ERR! notarget In most cases you or one of your dependencies are requesting
npm ERR! notarget a package version that doesn't exist.

[imranalisyed506]

Hello All,
Seeing same kind of error when encrypting
ERROR TypeError: Cannot read properties of undefined (reading 'byteLength')
at fromArrayBuffer (/var/runtime/node_modules/@aws-sdk/util-buffer-from/dist-cjs/index.js:6:60)
at Object.toBase64 [as base64Encoder] (/var/runtime/node_modules/@aws-sdk/util-base64-node/dist-cjs/index.js:18:51)
at serializeAws_json1_1EncryptRequest (/var/runtime/node_modules/@aws-sdk/client-kms/dist-cjs/protocols/Aws_json1_1.js:3433:61)
at serializeAws_json1_1EncryptCommand (/var/runtime/node_modules/@aws-sdk/client-kms/dist-cjs/protocols/Aws_json1_1.js:185:27)
at serialize (/var/runtime/node_modules/@aws-sdk/client-kms/dist-cjs/commands/EncryptCommand.js:30:69)
at /var/runtime/node_modules/@aws-sdk/middleware-serde/dist-cjs/serializerMiddleware.js:12:27
at /var/runtime/node_modules/@aws-sdk/middleware-logger/dist-cjs/loggerMiddleware.js:6:28
at KMSClient.send (/var/runtime/node_modules/@aws-sdk/smithy-client/dist-cjs/client.js:20:20)
at encrypt (/var/task/index.js:60:36)
at exports.handler (/var/task/index.js:81:11) TypeError: Cannot read properties of undefined (reading 'byteLength')
at fromArrayBuffer (/var/runtime/node_modules/@aws-sdk/util-buffer-from/dist-cjs/index.js:6:60)
at Object.toBase64 [as base64Encoder] (/var/runtime/node_modules/@aws-sdk/util-base64-node/dist-cjs/index.js:18:51)
at serializeAws_json1_1EncryptRequest (/var/runtime/node_modules/@aws-sdk/client-kms/dist-cjs/protocols/Aws_json1_1.js:3433:61)
at serializeAws_json1_1EncryptCommand (/var/runtime/node_modules/@aws-sdk/client-kms/dist-cjs/protocols/Aws_json1_1.js:185:27)
at serialize (/var/runtime/node_modules/@aws-sdk/client-kms/dist-cjs/commands/EncryptCommand.js:30:69)
at /var/runtime/node_modules/@aws-sdk/middleware-serde/dist-cjs/serializerMiddleware.js:12:27
at /var/runtime/node_modules/@aws-sdk/middleware-logger/dist-cjs/loggerMiddleware.js:6:28
at KMSClient.send (/var/runtime/node_modules/@aws-sdk/smithy-client/dist-cjs/client.js:20:20)
at encrypt (/var/task/index.js:60:36)
at exports.handler (/var/task/index.js:81:11)
below is the code

`async function encrypt(event, context) {
const params = {
KeyId: event.ResourceProperties.KeyId,
Plaintext: event.ResourceProperties.Plaintext
};

const kmsClient = new KMSClient({region: "us-east-1"});

try {
  const data = await kmsClient.send(new EncryptCommand(params));
  console.log(data);
  const base64 = Buffer.from(data.CiphertextBlob).toString("base64");
  const responseData = {
    EncryptedText: base64
  };

console.log(`Response body:\n${responseData}`);
} catch (err) {
  console.error(err, err.stack);
}

}`