search

FuelLabs / sway

🌴 Empowering everyone to build reliable and efficient smart contracts.
https://docs.fuel.network/docs/sway/
Apache License 2.0
62.76k stars 5.36k forks source link

forc-client should support signing transactions using a KMS #6560

Closed kayagokalp closed 5 days ago

kayagokalp commented 1 week ago

blocked by #6559

We need to implement a KMS signer for forc-client, specifically we can start with AWS KMS solution. This will allow us sign transactions using through KMS rather than local keys for more "shared" and "secure" deployment workflows.

kayagokalp commented 1 week ago

The rough design is the following:

  1. Check cli options to see if the user wants to use a local signer or a KMS one (at this stage if the user provided an arn the signer is a aws kms right away) 2-a. If it is local one, we will guide them through all the same workflow 3-a. If it is aws KMS one, we will use the AWS KMS arn, and basically use the upcoming AwsKmsSigner which implements Signer from rust-sdk, instead of WalletUnlocked which we use by default right now in forc-client