Struct KmsState 

pub struct KmsState {
    pub account_id: String,
    pub region: String,
    pub keys: BTreeMap<String, KmsKey>,
    pub aliases: BTreeMap<String, KmsAlias>,
    pub grants: Vec<KmsGrant>,
    pub custom_key_stores: BTreeMap<String, CustomKeyStore>,
    pub master_key_bytes: Vec<u8>,
    pub import_wrapping_keys: BTreeMap<String, ImportWrapEntry>,
}

Fields

account_id: String

region: String

keys: BTreeMap<String, KmsKey>

aliases: BTreeMap<String, KmsAlias>

grants: Vec<KmsGrant>

custom_key_stores: BTreeMap<String, CustomKeyStore>

master_key_bytes: Vec<u8>

Per-account master key bytes (32 bytes for AES-256-GCM) used to wrap plaintext in the AWS-shaped ciphertext blob format. Generated lazily on first encrypt and persisted alongside the rest of the state so that ciphertexts produced before a server restart still decrypt afterwards.

import_wrapping_keys: BTreeMap<String, ImportWrapEntry>

In-flight RSA wrapping keypairs handed out by GetParametersForImport and consumed by ImportKeyMaterial to RSA-OAEP-unwrap the encrypted key material. Keyed by the import token bytes returned to the caller; entries are removed after a successful import.

Implementations

impl KmsState

pub fn new(account_id: &str, region: &str) -> Self

pub fn reset(&mut self)

Trait Implementations

impl AccountState for KmsState

fn new_for_account(account_id: &str, region: &str, _endpoint: &str) -> Self

Create a fresh, empty state for the given account.

fn inherit_from(&mut self, _sibling: &Self)

Called after a new account state is created via MultiAccountState::get_or_create, with a reference to an existing sibling state. Services can override this to propagate shared resources (e.g. body caches) to the new state.

impl Clone for KmsState

fn clone(&self) -> KmsState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'de> Deserialize<'de> for KmsState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for KmsState

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.