decrypter

Documentation

Index

• Constants
• type Decrypter
  • func NewAWSKMSDescrypter(sess *session.Session) Decrypter
• type SecretDecrypter
  • func (s SecretDecrypter) Decrypt(secret string) (string, error)

Constants

const (
	// AWSKMSSecretPrefix is the secret prefix for secrets which can be
	// descrypted by the awsKMS decrypter.
	AWSKMSSecretPrefix = "aws:kms:"
)

Types

type Decrypter

type Decrypter interface {
	Decrypt(secret string) (string, error)
}

Decrypter is an interface describing any type of secret decrypter which given an ecrypted secret can return the decrypted plaintext value.

func NewAWSKMSDescrypter

func NewAWSKMSDescrypter(sess *session.Session) Decrypter

NewAWSKMSDescrypter initializes a new awsKMS based Decrypter.

type SecretDecrypter

type SecretDecrypter map[string]Decrypter

SecretDecrypter is a map of decrypters.

func (SecretDecrypter) Decrypt

func (s SecretDecrypter) Decrypt(secret string) (string, error)

Decrypt tries to find the right decrypter for the secret based on the secret prefix e.g. 'aws:kms:'. If the decrypter is found it will attempt to decrypt the secret and return it in plaintext.