kms_mrk_keyring.h

Go to the documentation of this file.

/*
 * Copyright 2021 Amazon.com, Inc. or its affiliates. All Rights Reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"). You may not use
 * this file except in compliance with the License. A copy of the License is
 * located at
 *
 *     http://aws.amazon.com/apache2.0/
 *
 * or in the "license" file accompanying this file. This file is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
 * implied. See the License for the specific language governing permissions and
 * limitations under the License.
 */
#ifndef AWS_ENCRYPTION_SDK_KMS_MRK_KEYRING_H
#define AWS_ENCRYPTION_SDK_KMS_MRK_KEYRING_H
 
#include <aws/cryptosdk/cpp/exports.h>
#include <aws/cryptosdk/cpp/kms_keyring.h>
 
#include <aws/core/Aws.h>
#include <aws/core/utils/Outcome.h>
#include <aws/core/utils/memory/stl/AWSMap.h>
#include <aws/core/utils/memory/stl/AWSSet.h>
#include <aws/core/utils/memory/stl/AWSString.h>
#include <aws/core/utils/memory/stl/AWSVector.h>
#include <aws/cryptosdk/materials.h>
#include <aws/kms/KMSClient.h>
#include <functional>
#include <mutex>
 
namespace Aws {
namespace Cryptosdk {
namespace KmsMrkAwareSymmetricKeyring {


class AWS_CRYPTOSDK_CPP_API Builder {
   public:
    Builder &WithGrantToken(const Aws::String &grant_token);

    Builder &WithGrantTokens(const Aws::Vector<Aws::String> &grant_tokens);

    Builder &WithClientSupplier(const std::shared_ptr<KmsKeyring::ClientSupplier> &client_supplier);

    Builder &WithKmsClient(const std::shared_ptr<KMS::KMSClient> &kms_client);

    aws_cryptosdk_keyring *Build(const Aws::String &key_id) const;

    aws_cryptosdk_keyring *BuildDiscovery(const Aws::String &region) const;

    aws_cryptosdk_keyring *BuildDiscovery(
        const Aws::String &region, std::shared_ptr<KmsKeyring::DiscoveryFilter> discovery_filter) const;
 
   private:
    std::shared_ptr<KMS::KMSClient> kms_client;
    Aws::Vector<Aws::String> grant_tokens;
    std::shared_ptr<KmsKeyring::ClientSupplier> client_supplier;
    Aws::String region;
};

class AWS_CRYPTOSDK_CPP_API MultiKeyringBuilder {
   public:
    MultiKeyringBuilder &WithGrantToken(const Aws::String &grant_token);

    MultiKeyringBuilder &WithGrantTokens(const Aws::Vector<Aws::String> &grant_tokens);

    MultiKeyringBuilder &WithClientSupplier(const std::shared_ptr<KmsKeyring::ClientSupplier> &client_supplier);

    aws_cryptosdk_keyring *Build(
        const Aws::String &generator_key_id, const Aws::Vector<Aws::String> &additional_key_ids = {}) const;

    aws_cryptosdk_keyring *Build(const Aws::Vector<Aws::String> &additional_key_ids = {}) const;

    aws_cryptosdk_keyring *BuildDiscovery(
        const Aws::Set<Aws::String> &regions,
        std::shared_ptr<KmsKeyring::DiscoveryFilter> discovery_filter = nullptr) const;
 
   private:
    Aws::Vector<Aws::String> grant_tokens;
    std::shared_ptr<KmsKeyring::ClientSupplier> client_supplier;

    aws_cryptosdk_keyring *_Build(
        const Aws::String &generator_key_id, const Aws::Vector<Aws::String> &additional_key_ids = {}) const;
};
  // doxygen group kms_mrk_keyring
 
}  // namespace KmsMrkAwareSymmetricKeyring
}  // namespace Cryptosdk
}  // namespace Aws
 
#endif  // AWS_ENCRYPTION_SDK_KMS_KEYRING_H