atoti_aws.KmsConfig

final class atoti_aws.KmsConfig

KMS config to use for client side encryption.

The AWS KMS CMK must have been created in the same AWS region as the destination bucket (Cf. AWS documentation).

Note

Due to a bug in Amazon’s encryption library, the region must also be passed either through the AWS_REGION environment variable or by adding -Daws.region to the java_options.

Example

>>> from atoti_aws import KmsConfig
>>> client_side_encryption = KmsConfig(
...     region="eu-west-3",
...     key_id="key_id",
... )

key_id: str

The ID to identify the key in KMS.

region: str

The AWS region to interact with.