aws-sdk-java-v2-kms

Installation
Summary

AWS KMS key management, encryption, and digital signing for Java applications with envelope encryption and Spring Boot integration.

  • Covers key creation, encryption/decryption, envelope encryption for large data, digital signatures, and key rotation using AWS SDK for Java 2.x
  • Includes synchronous and asynchronous client setup, Spring Boot service configuration, and IAM permission patterns
  • Provides envelope encryption patterns to reduce KMS API calls and support data larger than 4KB limit
  • Demonstrates Spring Boot integration with configuration beans and injectable encryption services
SKILL.md

AWS SDK for Java 2.x - AWS KMS (Key Management Service)

Overview

Provides AWS KMS patterns using AWS SDK for Java 2.x. Covers key management, encryption/decryption, envelope encryption, digital signatures, and Spring Boot integration.

Instructions

  1. Set Up IAM Permissions - Grant kms:* actions with least privilege
  2. Create KMS Client - Instantiate KmsClient with region and credentials
  3. Create Keys - Use createKey() → Verify key state is ENABLED before proceeding
  4. Set Key Policies - Define key usage permissions → Test access before production
  5. Encrypt Data - Use encrypt() for data <4KB; Verify ciphertext is not empty
  6. Envelope Encryption - For larger data, use generateDataKey() → Verify data key generation succeeded
  7. Digital Signatures - Create signing keys → Verify signatureValid=true after sign/verify
  8. Key Rotation - Enable auto-rotation → Confirm rotation schedule is active

When to Use

Related skills

More from giuseppe-trisciuoglio/developer-kit

Installs
848
GitHub Stars
246
First Seen
Feb 3, 2026