docstr: AwsApiClient - AwsKms - Encrypt - KMS Failure
code: def test_encrypt_kms_failure(boto_mock):
      """AwsApiClient - AwsKms - Encrypt - KMS Failure"""
      response = {"Error": {"ErrorCode": 400, "Message": "bad bucket"}}
      boto_mock.side_effect = ClientError(response, "operation")
      AwsKms.encrypt("secret", region=REGION, key_alias=KMS_ALIAS)
  
file_path: streamalert/tests/unit/streamalert/shared/test_aws_api_client.py
imports: import boto3
  from botocore.exceptions import ClientError
  from mock import patch
  from moto import mock_kms
  from nose.tools import assert_equal, raises
  from streamalert.shared.helpers.aws_api_client import AwsKms
  from tests.unit.streamalert.alert_processor import KMS_ALIAS, REGION
label_desc: Use image node_id 2 for calling the TestAwsKms obj's underlying member method code with example usage: obj.test_encrypt_kms_failure(boto_mock) without return types