An open API service indexing awesome lists of open source software.

https://github.com/sceptre/sceptre-kms-resolver

A Sceptre resolver to retrieve and decrypt values from AWS KMS
https://github.com/sceptre/sceptre-kms-resolver

sceptre sceptre-resolver

Last synced: 10 days ago
JSON representation

A Sceptre resolver to retrieve and decrypt values from AWS KMS

Awesome Lists containing this project

README

        

# Overview

The purpose of this resolver is to retrieve values from the AWS KMS.

## Install

```bash
pip install sceptre-kms-resolver
```

## Available Resolvers

### kms

Fetches the value stored in AWS KMS.

Syntax:

```yaml
parameter|sceptre_user_data:
: !kms CIPHERTEXT
```

#### Example:

Encrypt data with KMS to get a Ciphertext:
```
aws kms --key-id --plaintext --output text --query CiphertextBlob

AQICAHhZyEsV0yflwE0mpKvPz7/O/zc1epgIurV43wXF/qF6MwFQYwZq7TrvtQ2....
```

Use sceptre to retrieve and decrypt the value from KMS:
```
parameters:
database_password: !kms AQICAHhZyEsV0yflwE0mpKvPz7/O/zc1epgIurV43wXF/qF6MwFQYwZq7TrvtQ2...
```