aws / aws/aws-encryption-sdk-c
KMS keyring generator key id
Open
doc impact
- Dominant language
- C
- Stars
- 63
- Forks
- 59
- PR merge metrics
- No merged PRs in 30d
Description
If I am reading this correctly, the [KMS keyring builder](https://github.com/aws/aws-encryption-sdk-c/blob/master/aws-encryption-sdk-cpp/include/aws/cryptosdk/cpp/kms_keyring.h#L128-L129) requires that `generator_key_id` is set. This should not be required.
The core use case for this is that we need to allow the caller to explicitly control what keyring generates the data key. Requiring that the generator keyring is set removes this control.
Contributor guide
Assessment
This issue has not been assessed yet.