aws / aws/aws-encryption-sdk-python
Feature request: API to pass KMSMasterKeyProviderConfig to key providers' KMS clients
- Dominant language
- Python
- Stars
- 255
- Forks
- 92
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 2
Description
Currently, the best way to configure the KMS clients that Master Key Providers create, is to [subclass the desired provider](https://github.com/aws/aws-encryption-sdk-python/pull/440) to supply the desired KMS client configuration. This can be better handled by providing a dedicated API or argument, or to refactor the Python ESDK to use keyrings.
Context: https://github.com/aws/aws-encryption-sdk-python/issues/446
Contributor guide
Research direction
Start by reading the context in issue #446 and the subclassing approach in pull request #440. Determine the intended API for passing KMSMasterKeyProviderConfig to provider-created KMS clients, and define completion around a documented, tested way to configure those clients without subclassing.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 28/100