search

nsmithuk / local-kms

A mock version of AWS' Key Management Service, for local development and testing.
MIT License
198 stars 34 forks source link

[Discussion]Is it possible to manage the key store through AWS XKS #65

Open Laisky opened 11 months ago

Laisky commented 11 months ago

Is it possible to manage the key store through AWS XKS proxy instead of a local database or configuration file?

I'm not suggesting replacing the local database, but rather exploring the possibility of supporting multiple modes where users can choose to either store the keys locally or derive them from a remote XKS API.

Scenario

Our customers may have three different deployment modes:

  1. Cloud: directly using AWS KMS + XKS ✅
  2. Offline on-premise deployment: using local-kms ✅
  3. Online on-premise deployment: using local-kms + XKS ❓

I would like to discuss about the feasibility of using the third option.