aws

Documentation

Overview

Package aws implements a KMS backend for AWS KMS.

Index

• type KMSClient
  • func New(ctx context.Context, store kmsInterface.Storage, cfg uri.AWSConfig) (*KMSClient, error)
  • func (c *KMSClient) Close()
  • func (c *KMSClient) GetDEK(ctx context.Context, keyID string, dekSize int) ([]byte, error)

Types

type KMSClient

type KMSClient struct {
	// contains filtered or unexported fields
}

KMSClient implements the CloudKMS interface for AWS.

func New

func New(ctx context.Context, store kmsInterface.Storage, cfg uri.AWSConfig) (*KMSClient, error)

New creates and initializes a new KMSClient for AWS.

func (*KMSClient) Close

func (c *KMSClient) Close()

Close is a no-op for AWS.

func (*KMSClient) GetDEK

func (c *KMSClient) GetDEK(ctx context.Context, keyID string, dekSize int) ([]byte, error)

GetDEK fetches an encrypted Data Encryption Key from storage and decrypts it using a KEK stored in AWS KMS.