awskms

Documentation

Index

• type Config
• type Vault
  • func New(ctx context.Context, config *Config) (*Vault, error)
  • func (v *Vault) GetPublicKey(ctx context.Context, keyID string) (vault.StoredKey, error)
  • func (v *Vault) ListPublicKeys(ctx context.Context) vault.StoredKeysIterator
  • func (v *Vault) Name() string
  • func (v *Vault) Sign(ctx context.Context, digest []byte, key vault.StoredKey) (cryptoutils.Signature, error)

Types

type Config

type Config struct {
	UserName    string `yaml:"user_name" validate:"required"`
	AccessKeyID string `yaml:"access_key_id"`
	AccessKey   string `yaml:"secret_access_key"`
	Region      string `yaml:"region" validate:"required"`
}

Config contains AWS KMS backend configuration

type Vault

type Vault struct {
	// contains filtered or unexported fields
}

func New

func New(ctx context.Context, config *Config) (*Vault, error)

New creates new AWS KMS backend

func (*Vault) GetPublicKey

func (v *Vault) GetPublicKey(ctx context.Context, keyID string) (vault.StoredKey, error)

func (*Vault) ListPublicKeys

func (v *Vault) ListPublicKeys(ctx context.Context) vault.StoredKeysIterator

ListPublicKeys returns a list of keys stored under the backend

func (*Vault) Name

func (v *Vault) Name() string

Name returns backend name

func (*Vault) Sign

func (v *Vault) Sign(ctx context.Context, digest []byte, key vault.StoredKey) (cryptoutils.Signature, error)