commons-codec 1.3 is being used: https://github.com/aws/aws-sdk-java/blob/master/pom.xml#L44 Is there a reason for that? Why not update it to 1.9? http://commons.apache.org/proper/commons-codec/