When using KMSMasterKeyProvider, can a CMK key alias be used as the key_id instead of the arn?
The KMS API GenerateDataKey operation accepts alias as the key_id. But it looks like the sdk expects the key_id to be an arn. If the key_id is not an arn, the init fails with the below error -
The below fails with an exception -
kwargs = dict(
key_ids=["alias/cmk-alias"],
region_names=["us-east-1"],
botocore_session=existing_session
)
aws_encryption_sdk.KMSMasterKeyProvider(**kwargs)
UnknownRegionError: No default region found and no region determinable from key id: alias/cmk-alias
/usr/local/lib/python2.7/site-packages/aws_encryption_sdk/key_providers/kms.py:50:UnknownRegionError
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4