aws / aws/aws-encryption-sdk-c

KMS keyring generator key id

Open
#373 3 comments 0 reactions 1 assignee Claimed by @robin-aws View on GitHub
doc impact
Dominant language
C
Stars
63
Forks
59
PR merge metrics
No merged PRs in 30d

Description

If I am reading this correctly, the [KMS keyring builder](https://github.com/aws/aws-encryption-sdk-c/blob/master/aws-encryption-sdk-cpp/include/aws/cryptosdk/cpp/kms_keyring.h#L128-L129) requires that `generator_key_id` is set. This should not be required.

The core use case for this is that we need to allow the caller to explicitly control what keyring generates the data key. Requiring that the generator keyring is set removes this control.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.