aws / aws/aws-dynamodb-encryption-java
Support AWS KMS grant tokens
- Dominant language
- Java
- Stars
- 141
- Forks
- 74
- PR merge metrics
- No merged PRs in 30d
Description
There is no simple support for AWS KMS grant tokens.
Customers can extend `DirectKmsMaterialProvider`
and override the `generateDataKey` or the appropriate AWS KMS call.
see
https://github.com/aws/aws-dynamodb-encryption-java/blob/41ad9bf0e06b9da8dab83cb9d804d3eb68ef29f5/sdk1/src/main/java/com/amazonaws/services/dynamodbv2/datamodeling/encryption/providers/DirectKmsMaterialProvider.java#L250
Contributor guide
Research direction
Start with sdk1/src/main/java/com/amazonaws/services/dynamodbv2/datamodeling/encryption/providers/DirectKmsMaterialProvider.java at the referenced generateDataKey or appropriate AWS KMS call. Trace how that call is made and determine the intended way for callers to supply grant tokens. Done means DirectKmsMaterialProvider offers simple support for AWS KMS grant tokens without requiring customers to override the provider.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, java
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100