Documentation
¶
Overview ¶
Package kms provides the AWS-backed keychain credential.
keychain.WithKMSClient takes an already-constructed crypto.KMSClient and so needs no SDK. WithARN below builds one on demand from a key ARN, which does. Separating them is what keeps pkg/keychain importable without the AWS SDK (RFC 0022 §6).
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func WithARN ¶
func WithARN(arn string) keychain.Credential
WithARN returns a credential using an AWS KMS key ARN, initializing the client on demand. Prefer keychain.WithKMSClient when a client is already available, or when the client needs a region, endpoint, or aws.Config — this constructor deliberately takes no options, so it resolves against the ambient AWS environment.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.