nevzheng opened a new pull request, #12135:
URL: https://github.com/apache/gravitino/pull/12135

   ### What changes were proposed in this pull request?
   
   Add an AWS KMS provider using the official AWS SDK:
   
   - inspect keys with `DescribeKey`;
   - use the default AWS credential chain;
   - require a region and support an optional endpoint override;
   - normalize missing, enabled, and `ENCRYPT_DECRYPT` capabilities; and
   - register the provider through `ServiceLoader`.
   
   ### Why are the changes needed?
   
   AWS key identifiers and state must be validated by AWS while presenting the 
same normalized contract used by other KMS providers.
   
   Part of #12131. Depends on the preceding KMS API stack.
   
   ### Does this PR introduce _any_ user-facing change?
   
   Yes. It adds the `aws-kms` source type and its configuration properties.
   
   ### How was this patch tested?
   
   - `./gradlew :bundles:aws:test -PskipITs`
   
   ### Series
   
   - Epic: #12131
   - Position: 4 of 11
   - Previous: Transit key inspection providers
   - Next: Google Cloud KMS key inspection
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to