Struct tink_awskms::AwsClient

pub struct AwsClient { /* fields omitted */ }

AwsClient represents a client that connects to the AWS KMS backend.

Implementations

impl AwsClient

pub fn new(uri_prefix: &str) -> Result<AwsClient, TinkError>

Return a new AWS KMS client which will use default credentials to handle keys with uri_prefix prefix. uri_prefix must have the following format: aws-kms://arn:<partition>:kms:<region>:[:path] See http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html.

pub fn new_with_credentials(
    uri_prefix: &str,
    credential_path: &Path
) -> Result<AwsClient, TinkError>

Return a new AWS KMS client which will use given credentials to handle keys with uri_prefix prefix. uri_prefix must have the following format: aws-kms://arn:<partition>:kms:<region>:[:path] See http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html.

pub fn new_with_kms(
    uri_prefix: &str,
    kms: KmsClient
) -> Result<AwsClient, TinkError>

Return a new AWS KMS client with user created KMS client. Client is responsible for keeping the region consistency between key URI and KMS client. uri_prefix must have the following format: aws-kms://arn:<partition>:kms:<region>:[:path] See http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html.

Trait Implementations

impl Debug for AwsClient

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KmsClient for AwsClient

fn supported(&self, key_uri: &str) -> bool

Returns true if this client does support key_uri.

fn get_aead(&self, key_uri: &str) -> Result<Box<dyn Aead>, TinkError>

Get an AEAD backed by key_uri. key_uri must have the following format: aws-kms://arn:<partition>:kms:<region>:[:path]. See http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html.