aws / aws/amazon-s3-encryption-client-python
Fixup the KmsKeyring spec to prefer GDK
Open
- Dominant language
- Python
- Stars
- 2
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
See https://github.com/aws/amazon-s3-encryption-client-python/pull/143 and the exceptions added there.
The spec was written to imply Encrypt is the preferred KMS API, but it should be GDK first,
and only (maybe/should) use Encrypt when the Materials already have an existing data key.
Contributor guide
Research direction
Start with the KmsKeyring spec and compare its expectations with the exceptions added in pull request 143. Update the spec so GDK is preferred, using Encrypt only when the Materials already contain an existing data key, and confirm the expected behavior through the relevant spec tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, python
- Domain
- cloud, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100