AWSKMS
AWS KMS Configuration
Create an asymetric key with usage as "sign and verify" in your AWS account. Note: Support for "ECC_SECG_P256K1" spec is not there yet.
Search for IAM and create a user with "Programmatic access" for Signatory to access the key resources. Save the details at the end which will be given only once on creation of the user.
AWS KMS backend
Below are the minimum configuration required.
awskms:
driver: awskms
config:
user_name: sigy-tsty
access_key_id: AKIATXBC6RIH4YZT5U6B
secret_access_key: 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
region: us-west-2
Configuration parameters
Name | Type | Required | Description |
---|---|---|---|
user_name | string | ✅ | IAM user name |
access_key_id | string | OPTIONAL | IAM user detail |
secret_access_key | string | OPTIONAL | IAM user detail |
region | string | ✅ | Region where key is created |
The fields access_key_id
& secret_access_key
can be set in the environment variables AWS_ACCESS_KEY_ID
& AWS_SECRET_ACCESS_KEY
respectively.