kmssigner

Documentation

Index

• func New(kmsapi kmsiface.KMSAPI, keyArn string) (crypto.Signer, error)

Functions

func New

func New(kmsapi kmsiface.KMSAPI, keyArn string) (crypto.Signer, error)

New will create a new KMS Signer.

The returned crypto.Signer will, when asked to sign, invoke the KMS to Sign the requested digest without holding the private key in memory at any time.

When New is invoked, New will fetch the PublicKey from the KMS, and create a crypto.Signer that's able to preform the signing operations using the corresponding KMS private key.

The returned crypto.Signer is an internal type, and contains no methods or exported fields beyond those required from the crypto.Signer interface.