SNOW-1851439: Snowflake JDBC Thin driver showing runtime errors in AWS Lambda function

[debasis094]

Please answer these questions before submitting your issue.
In order to accurately debug the issue this information is required. Thanks!

1. What version of JDBC driver are you using ? - 3.20.0

   net.snowflake snowflake-jdbc-thin 3.20.0

2. What operating system and processor architecture are you using? AWS Lambda , Linux

3. What version of Java are you using? java 11

4. What did you do?

   Added below dependency to my POM.xml

   net.snowflake snowflake-jdbc-thin 3.20.0

5. What did you expect to see? Expected to see successful connection with Snowflake database

   What should have happened and what happened instead?

6. Can you set logging to DEBUG and collect the logs?

   https://community.snowflake.com/s/article/How-to-generate-log-file-on-Snowflake-connectors

   Before sharing any information, please be sure to review the log and remove any sensitive
   information.

[debasis094]

below is the exact runtime error

SEVERE: Failed to load org.bouncycastle.jce.provider.BouncyCastleProvider, err=org.bouncycastle.jce.provider.BouncyCastleProvider. Current classpath: file:/var/task/. If you use Snowflake JDBC for FIPS jar, import BouncyCastleFipsProvider in the application.

java.lang.ExceptionInInitializerError: java.lang.ExceptionInInitializerError
java.lang.ExceptionInInitializerError
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
at java.base/java.lang.reflect.Constructor.newInstance(Unknown Source)
at com.zaxxer.hikari.HikariConfig.setDriverClassName(HikariConfig.java:492)
at org.nmdp.haplogic.drs.producer.config.SnowflakeJdbcContext.snowflakeHikariDataSource(SnowflakeJdbcContext.java:22)
at org.nmdp.haplogic.drs.producer.config.DrsProducerContext.(DrsProducerContext.java:18)
at org.nmdp.haplogic.drs.producer.handler.DrsProducerHandler.(DrsProducerHandler.java:35)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
at java.base/java.lang.reflect.Constructor.newInstance(Unknown Source)
Caused by: java.lang.RuntimeException: Failed to load org.bouncycastle.jce.provider.BouncyCastleProvider, err=org.bouncycastle.jce.provider.BouncyCastleProvider. Current classpath: file:/var/task/. If you use Snowflake JDBC for FIPS jar, import BouncyCastleFipsProvider in the application.
at net.snowflake.client.core.SecurityUtil.instantiateSecurityProvider(SecurityUtil.java:55)
at net.snowflake.client.core.SecurityUtil.addBouncyCastleProvider(SecurityUtil.java:32)
at net.snowflake.client.jdbc.SnowflakeDriver.(SnowflakeDriver.java:67)
... 12 more
Caused by: java.lang.ClassNotFoundException: org.bouncycastle.jce.provider.BouncyCastleProvider. Current classpath: file:/var/task/

[sfc-gh-sghosh]

Hello @debasis094 ,

Thanks for raising the issue. Could you provide the following information.

1. Was it working fine before with JDBC thin driver ?
2. Did you try with fat-jar driver ?
3. The error you are encountering indicates that the BouncyCastleProvider class required by the Snowflake JDBC driver for FIPS compliance is not available in the classpath. Specifically, the BouncyCastle FIPS provider JAR is missing.

The fat jdbc jar contains all dependencies and in thin you have to provide all dependencies from your side.
5. Please download the BouncyCastle jar files, include the following JARs in your AWS Lambda deployment package:
bcpkix-fips-.jar
bc-fips-.jar
snowflake-jdbc-fips.jar
6. When deploying to AWS Lambda, ensure all required dependencies are included in the .zip or container image used to run the function.
7. Modify your Lambda code to explicitly register the BouncyCastleProvider
Example: `import org.bouncycastle.jce.provider.BouncyCastleProvider;
import java.security.Security;

public class YourLambdaHandler {
static {
Security.addProvider(new BouncyCastleProvider());
}

public void handleRequest(...) {
    // Your Lambda function logic
}

}`
8. Test the packaged JAR locally using a similar Java runtime environment before deploying to AWS Lambda.

Regards,
Sujan