Frédéric Branca
Frédéric Branca
# Add AWS KMS client connector New code to use AWS KMS for bucket encryption, based on the KMIP implementation. Add an optional "GenerateDataKey" function on the kms client API,...
Add TLS configuration to the KMS AWS & a README for documenting the configuration. Added TLS configuration can: - Allows self-signed CA during development, - Enable mTLS to authenticate the...
This config allows enabling encryption by default. It currently only allows AES256. If the user provide the x-amz-scal-server-side-encryption header on bucket creation, the header's value takes precedence.
Debug & Display Trait are very verbose by default. This can easily lead to leaks of biscuit content in logs, for example if a biscuit is passed to an instrumented...