[feat] Support for AWS KMS asymmetric encryption

[danmx]

AWS KMS now support asymmetric encryption. Support in gopass would be very useful for some automation tasks or to restrict access to secrets based on AWS IAM.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[worldofgeese]

@dominikschulz can we reopen this issue? I think its inclusion would make gopass palatable for corporate use

[dominikschulz]

I'm afraid I'll need more information.

I've never used AWS KMS.

Could someone please give a detailed description (incl. Links to Docs) of how this should look like?

[dominikschulz]

gopass is designed to be offline first. A dependency on a cloud service doesn't fit that very well. If with palatable for corporate use you mean strict auditing and access control then, I'm afraid, you shouldn't use gopass.

If you want a reliable and low-dependency store for personal use, small teams and disaster recovery then I suggest using gopass.