Add support for additional awskms parameters (#1468)

This updates to the latest go-kms-wrapping tag to support these
parameters and documents them.
This commit is contained in:
Jeff Mitchell authored and GitHub committed 2021-08-18 12:45:20 -04:00
1 parent 31af49e76d
commit b0dbd0182e
5 files changed
+39 -16

No files matched your search

@@ -38,20 +38,38 @@ These parameters apply to the `kms` stanza in the Boundary configuration file:
`AWS_DEFAULT_REGION` environment variables, from your `~/.aws/config` file,
or from instance metadata.
- `access_key` `(string: <required>)`: The AWS access key ID to use. May also be
- `kms_key_id` `(string: <required>)`: The AWS KMS key ID to use for encryption
and decryption. May also be specified by the `AWSKMS_WRAPPER_KEY_ID`
environment variable.
- `access_key` `(string: "")`: The AWS access key ID to use. May also be
specified by the `AWS_ACCESS_KEY_ID` environment variable or as part of the
AWS profile from the AWS CLI or instance profile.
- `session_token` `(string: "")`: Specifies the AWS session token. This can
also be provided via the environment variable `AWS_SESSION_TOKEN`.
- `secret_key` `(string: <required>)`: The AWS secret access key to use. May
- `secret_key` `(string: "")`: The AWS secret access key to use. May
also be specified by the `AWS_SECRET_ACCESS_KEY` environment variable or as
part of the AWS profile from the AWS CLI or instance profile.
- `kms_key_id` `(string: <required>)`: The AWS KMS key ID to use for encryption
and decryption. May also be specified by the `AWSKMS_WRAPPER_KEY_ID`
environment variable.
- `shared_creds_filename` `(string: "")`: (Boundary 0.5.1+) If set, the file
name to read as a shared credentials file.
- `shared_creds_profile` `(string: "")`: (Boundary 0.5.1+) If set, the
profile to use from the shared credentials file. If not set, will use the
`AWS_PROFILE` env var, or if that is not set, `"default"`.
- `role_arn` `(string: "")`: (Boundary 0.5.1+) If this and
`web_identity_token_file` are set, the role ARN to use when using a web
identity role provider with STS.
- `web_identity_token_file` `(string: "")`: (Boundary 0.5.1+) If this and
`role_arn` are set, the token file to use when using a web identity role
provider with STS.
- `role_session_name` `(string: "")`: (Boundary 0.5.1+) If using the web
identity role provider, the role session to use.
- `endpoint` `(string: "")`: The KMS API endpoint to be used to make AWS KMS
requests. May also be specified by the `AWS_KMS_ENDPOINT` environment