scality / cloudserver

Zenko CloudServer, an open-source Node.js implementation of the Amazon S3 protocol on the front-end and backend storage capabilities to multiple clouds, including Azure and Google.

https://www.zenko.io/cloudserver

Apache License 2.0

1.68k stars 236 forks source link

Add AWS KMS client connector #5624

Open outscale-fba opened 1 month ago

outscale-fba commented 1 month ago

Add AWS KMS client connector

New code to use AWS KMS for bucket encryption, based on the KMIP implementation.

Add an optional "GenerateDataKey" function on the kms client API, only defined in the AWS KMS client. This new function is used in cloudserver when detected for the creation of a datakey. For others existing KMS implementations (KMIP, file, memory, ...) the behavior is unchanged.

The following modifications are made:

Arsenal:

new package dependency: @aws-sdk/client-kms
new dev dependency: aws-sdk-client-mock
new source file for implementing the AWS KMS backend connector
introduce a new optional "GenerateDataKey" function on the client
add unit tests on the new AWS KMS client.

Cloudserver:

Add a new configuration section for the AWS KMS backend connector,
New code to use the GenerateDataKey function when available.