kms

Documentation

Index

• type Service
  • func New(region string) *Service
  • func (s *Service) Detect(r *http.Request) bool
  • func (s *Service) Name() string
  • func (s *Service) Reset()
  • func (s *Service) ServeHTTP(w http.ResponseWriter, r *http.Request)

Types

type Service

type Service struct {
	// contains filtered or unexported fields
}

Service implements the AWS KMS emulator. Key material is generated locally using crypto/rand. Encrypt/Decrypt use real AES-256-GCM so ciphertexts produced by the emulator are genuinely decryptable — they are not forwarded to AWS.

func New

func New(region string) *Service

func (*Service) Detect

func (s *Service) Detect(r *http.Request) bool

Detect identifies KMS requests by X-Amz-Target header (TrentService.*).

func (*Service) Name

func (s *Service) Name() string

func (*Service) Reset

func (s *Service) Reset()

Reset clears all keys, aliases, and grants.

func (*Service) ServeHTTP

func (s *Service) ServeHTTP(w http.ResponseWriter, r *http.Request)