The highest tagged major version is v6.

encryption

package

v5.1.0 Latest Latest Go to latest Published: Oct 14, 2026 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/theory-cloud/tabletheory

Links

Open Source Insights

Documentation ¶

Index ¶

func EncryptUpdateExpressionValues(ctx context.Context, svc *Service, metadata *model.Metadata, ...) error
func FailClosedIfEncryptedWithoutKMSKeyARN(sess *session.Session, metadata *model.Metadata) error
func MetadataHasEncryptedFields(metadata *model.Metadata) bool
type Service
- func (s *Service) DecryptAttributeValue(ctx context.Context, attributeName string, envelope types.AttributeValue) (types.AttributeValue, error)
- func (s *Service) EncryptAttributeValue(ctx context.Context, attributeName string, av types.AttributeValue) (types.AttributeValue, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func EncryptUpdateExpressionValues ¶

func EncryptUpdateExpressionValues(
	ctx context.Context,
	svc *Service,
	metadata *model.Metadata,
	updateExpression string,
	exprAttrNames map[string]string,
	exprAttrValues map[string]types.AttributeValue,
) error

EncryptUpdateExpressionValues mutates exprAttrValues in-place by encrypting values assigned to encrypted fields. It currently supports direct SET assignments and if_not_exists() defaults for encrypted fields.

func FailClosedIfEncryptedWithoutKMSKeyARN ¶

func FailClosedIfEncryptedWithoutKMSKeyARN(sess *session.Session, metadata *model.Metadata) error

func MetadataHasEncryptedFields ¶

func MetadataHasEncryptedFields(metadata *model.Metadata) bool

Types ¶

type Service ¶

type Service struct {
	// contains filtered or unexported fields
}

Service implements envelope encryption for DynamoDB attribute values using AWS KMS.

func NewService ¶

func NewService(keyARN string, kmsClient kmsAPI) *Service

func NewServiceFromAWSConfig ¶

func NewServiceFromAWSConfig(keyARN string, cfg aws.Config) *Service

func NewServiceFromAWSConfigWithRand ¶

func NewServiceFromAWSConfigWithRand(keyARN string, cfg aws.Config, rng io.Reader) *Service

func NewServiceWithRand ¶

func NewServiceWithRand(keyARN string, kmsClient kmsAPI, rng io.Reader) *Service

func (*Service) DecryptAttributeValue ¶

func (s *Service) DecryptAttributeValue(ctx context.Context, attributeName string, envelope types.AttributeValue) (types.AttributeValue, error)

func (*Service) EncryptAttributeValue ¶

func (s *Service) EncryptAttributeValue(ctx context.Context, attributeName string, av types.AttributeValue) (types.AttributeValue, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL