The encryption SDK v1.6.1 accepts multi-region keys in KmsMasterKeyProvider for encryption and decryption. Starting with v1.7.0, the multi-region keys are not supported by default in the KmsMasterKeyProvider implementation. The solution is to replace KmsMasterKeyProvider with AwsKmsMrkAwareMasterKeyProvider, the class dedicated to multi-region keys.