lavaleri

Add example for using CachingMostRecentProvider and upgrading material version

1

### Problem: The AWS docs mention "rotating cryptographic material" here: https://docs.aws.amazon.com/dynamodb-encryption-client/latest/devguide/most-recent-provider.html However it could be more clear what "call the provider store's Create New Provider operation with the material name...

NPE if reading record without a amzn-ddb-map-desc

6

This line throws a null pointer exception if you attempt to decrypt a record where the amzn-ddb-map-desc attribute has been manually removed: https://github.com/aws/aws-dynamodb-encryption-java/blob/master/sdk1/src/main/java/com/amazonaws/services/dynamodbv2/datamodeling/encryption/providers/DirectKmsMaterialProvider.java#L126 We should check this earlier and throw...

DirectKMSMaterialProvider API Behavior/Design improvements

1

### Problem: The correct behavior of the DirectKMSMaterialProvider is to use the configured CMK on encrypt, and to let KMS determine the correct CMK to use on Decrypt (this is...

### Problem: If a user attempts to use a CachingMostRecentProvider to decrypt a record that *does* contain a mat-desc, but that mat-desc does not contain the key value "amzn-ddb-meta-id," they...