Package io.confluent.kafka.schemaregistry.encryption.alicloud

Class AliCloudKmsClient

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.alicloud.AliCloudKmsClient

All Implemented Interfaces:

com.google.crypto.tink.KmsClient

public final class AliCloudKmsClient
extends Object
implements com.google.crypto.tink.KmsClient

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PREFIX	The prefix of all keys stored in Alibaba Cloud KMS.

Constructor Summary

Constructors

Constructor	Description
AliCloudKmsClient()	Constructs a generic AliCloudKmsClient that is not bound to any specific key.
AliCloudKmsClient(String uri)	Constructs an AliCloudKmsClient that is bound to a single key identified by uri.
AliCloudKmsClient(Map<String,?> configs, Optional<String> kekUrl)

Method Summary

Modifier and Type	Method	Description
boolean	doesSupport(String uri)
com.google.crypto.tink.Aead	getAead(String uri)
static void	register(Optional<String> keyUri, Optional<String> credentialPath)	Creates and registers an Alibaba Cloud KMS client with the Tink runtime.
com.google.crypto.tink.KmsClient	withCredentials(String credentialPath)
com.google.crypto.tink.KmsClient	withDefaultCredentials()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

PREFIX

public static final String PREFIX

The prefix of all keys stored in Alibaba Cloud KMS.

See Also:

• Constant Field Values

Constructor Details

AliCloudKmsClient

public AliCloudKmsClient()

Constructs a generic AliCloudKmsClient that is not bound to any specific key.

AliCloudKmsClient

public AliCloudKmsClient(String uri)

Constructs an AliCloudKmsClient that is bound to a single key identified by uri.

AliCloudKmsClient

public AliCloudKmsClient(Map<String,?> configs,
 Optional<String> kekUrl)
                  throws GeneralSecurityException

Throws:

GeneralSecurityException

Method Details

doesSupport

public boolean doesSupport(String uri)

Specified by:

doesSupport in interface com.google.crypto.tink.KmsClient

withCredentials

public com.google.crypto.tink.KmsClient withCredentials(String credentialPath)
                                                 throws GeneralSecurityException

Specified by:

withCredentials in interface com.google.crypto.tink.KmsClient

Throws:

GeneralSecurityException

withDefaultCredentials

public com.google.crypto.tink.KmsClient withDefaultCredentials()

Specified by:

withDefaultCredentials in interface com.google.crypto.tink.KmsClient

getAead

public com.google.crypto.tink.Aead getAead(String uri)
                                    throws GeneralSecurityException

Specified by:

getAead in interface com.google.crypto.tink.KmsClient

Throws:

GeneralSecurityException

register

public static void register(Optional<String> keyUri,
 Optional<String> credentialPath)
                     throws GeneralSecurityException

Creates and registers an Alibaba Cloud KMS client with the Tink runtime.

Throws:

GeneralSecurityException