a08ccbffa7
* Port awskms autoseal * Rename files * WIP autoseal * Fix protobuf conflict * Expose some structs to properly allow encrypting stored keys * Update awskms with the latest changes * Add KeyGuard implementation to abstract encryption/decryption of keys * Fully decouple seal.Access implementations from sealwrap structs * Add extra line to proto files, comment update * Update seal_access_entry.go * govendor sync * Add endpoint info to configureAWSKMSSeal * Update comment * Refactor structs * Update make proto * Remove remove KeyGuard, move encrypt/decrypt to autoSeal * Add rest of seals, update VerifyRecoveryKeys, add deps * Fix some merge conflicts via govendor updates * Rename SealWrapEntry to EncryptedBlobInfo * Remove barrier type upgrade check in oss * Add key to EncryptedBlobInfo proto * Update barrierTypeUpgradeCheck signature
82 lines
3.2 KiB
Go
Executable file
82 lines
3.2 KiB
Go
Executable file
package kms
|
|
|
|
//Licensed under the Apache License, Version 2.0 (the "License");
|
|
//you may not use this file except in compliance with the License.
|
|
//You may obtain a copy of the License at
|
|
//
|
|
//http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
//Unless required by applicable law or agreed to in writing, software
|
|
//distributed under the License is distributed on an "AS IS" BASIS,
|
|
//WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
//See the License for the specific language governing permissions and
|
|
//limitations under the License.
|
|
//
|
|
// Code generated by Alibaba Cloud SDK Code Generator.
|
|
// Changes may cause incorrect behavior and will be lost if the code is regenerated.
|
|
|
|
import (
|
|
"github.com/aliyun/alibaba-cloud-sdk-go/sdk"
|
|
"github.com/aliyun/alibaba-cloud-sdk-go/sdk/auth"
|
|
)
|
|
|
|
// Client is the sdk client struct, each func corresponds to an OpenAPI
|
|
type Client struct {
|
|
sdk.Client
|
|
}
|
|
|
|
// NewClient creates a sdk client with environment variables
|
|
func NewClient() (client *Client, err error) {
|
|
client = &Client{}
|
|
err = client.Init()
|
|
return
|
|
}
|
|
|
|
// NewClientWithOptions creates a sdk client with regionId/sdkConfig/credential
|
|
// this is the common api to create a sdk client
|
|
func NewClientWithOptions(regionId string, config *sdk.Config, credential auth.Credential) (client *Client, err error) {
|
|
client = &Client{}
|
|
err = client.InitWithOptions(regionId, config, credential)
|
|
return
|
|
}
|
|
|
|
// NewClientWithAccessKey is a shortcut to create sdk client with accesskey
|
|
// usage: https://help.aliyun.com/document_detail/66217.html
|
|
func NewClientWithAccessKey(regionId, accessKeyId, accessKeySecret string) (client *Client, err error) {
|
|
client = &Client{}
|
|
err = client.InitWithAccessKey(regionId, accessKeyId, accessKeySecret)
|
|
return
|
|
}
|
|
|
|
// NewClientWithStsToken is a shortcut to create sdk client with sts token
|
|
// usage: https://help.aliyun.com/document_detail/66222.html
|
|
func NewClientWithStsToken(regionId, stsAccessKeyId, stsAccessKeySecret, stsToken string) (client *Client, err error) {
|
|
client = &Client{}
|
|
err = client.InitWithStsToken(regionId, stsAccessKeyId, stsAccessKeySecret, stsToken)
|
|
return
|
|
}
|
|
|
|
// NewClientWithRamRoleArn is a shortcut to create sdk client with ram roleArn
|
|
// usage: https://help.aliyun.com/document_detail/66222.html
|
|
func NewClientWithRamRoleArn(regionId string, accessKeyId, accessKeySecret, roleArn, roleSessionName string) (client *Client, err error) {
|
|
client = &Client{}
|
|
err = client.InitWithRamRoleArn(regionId, accessKeyId, accessKeySecret, roleArn, roleSessionName)
|
|
return
|
|
}
|
|
|
|
// NewClientWithEcsRamRole is a shortcut to create sdk client with ecs ram role
|
|
// usage: https://help.aliyun.com/document_detail/66223.html
|
|
func NewClientWithEcsRamRole(regionId string, roleName string) (client *Client, err error) {
|
|
client = &Client{}
|
|
err = client.InitWithEcsRamRole(regionId, roleName)
|
|
return
|
|
}
|
|
|
|
// NewClientWithRsaKeyPair is a shortcut to create sdk client with rsa key pair
|
|
// attention: rsa key pair auth is only Japan regions available
|
|
func NewClientWithRsaKeyPair(regionId string, publicKeyId, privateKey string, sessionExpiration int) (client *Client, err error) {
|
|
client = &Client{}
|
|
err = client.InitWithRsaKeyPair(regionId, publicKeyId, privateKey, sessionExpiration)
|
|
return
|
|
}
|