cossacklabs / acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
https://www.cossacklabs.com/acra/
Apache License 2.0
1.35k stars 128 forks source link

Keymaker master key with KMS #553

Closed Zhaars closed 2 years ago

Zhaars commented 2 years ago

Implemented basic support of KMS in the keymaker for AMK generation. Introduce the new flag kms_key_policy which describes possible policies for KMS keys. For now only create is supported.

Made a small refactoring of KMS package by creating a new extended common interface for all KMS operations (Keystore - not an ideal name, can think about a better name). Also, create a separate abstraction called KmsClient that should care about all internal stuff for corresponded KMS.

Checklist