Package io.confluent.kafka.schemaregistry.encryption.alicloud

Class AliCloudKmsDriver

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.alicloud.AliCloudKmsDriver

All Implemented Interfaces:

KmsDriver

public final class AliCloudKmsDriver
extends Object
implements KmsDriver

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCESS_KEY_ID_CONFIG
static final String	ACCESS_KEY_SECRET_CONFIG
static final String	CA_FILE_CONFIG
static final String	CREDENTIAL_TYPE_CONFIG
static final String	ENDPOINT_CONFIG
static final String	EXTERNAL_ID_CONFIG
static final String	KMS_TYPE
static final String	POLICY_CONFIG
static final String	ROLE_ARN_CONFIG
static final String	ROLE_SESSION_EXPIRATION_CONFIG
static final String	ROLE_SESSION_NAME_CONFIG
static final String	SECURITY_TOKEN_CONFIG
static final String	STS_ENDPOINT_CONFIG

Fields inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

KMS_TYPE_SUFFIX, TEST_CLIENT

Constructor Summary

Constructors

Constructor	Description
AliCloudKmsDriver()

Method Summary

Modifier and Type	Method	Description
String	getKeyUrlPrefix()
boolean	isAccessDeniedException(Throwable t)
com.google.crypto.tink.KmsClient	newKmsClient(Map<String,?> configs, Optional<String> kekUrl)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

doesSupport, getKmsClient, getTestClient, isAccessDenied, isAccessDeniedStatus, registerKmsClient

Field Details

KMS_TYPE

public static final String KMS_TYPE

See Also:

• Constant Field Values

ENDPOINT_CONFIG

public static final String ENDPOINT_CONFIG

See Also:

• Constant Field Values

CA_FILE_CONFIG

public static final String CA_FILE_CONFIG

See Also:

• Constant Field Values

ACCESS_KEY_ID_CONFIG

public static final String ACCESS_KEY_ID_CONFIG

See Also:

• Constant Field Values

ACCESS_KEY_SECRET_CONFIG

public static final String ACCESS_KEY_SECRET_CONFIG

See Also:

• Constant Field Values

SECURITY_TOKEN_CONFIG

public static final String SECURITY_TOKEN_CONFIG

See Also:

• Constant Field Values

CREDENTIAL_TYPE_CONFIG

public static final String CREDENTIAL_TYPE_CONFIG

See Also:

• Constant Field Values

ROLE_ARN_CONFIG

public static final String ROLE_ARN_CONFIG

See Also:

• Constant Field Values

ROLE_SESSION_NAME_CONFIG

public static final String ROLE_SESSION_NAME_CONFIG

See Also:

• Constant Field Values

ROLE_SESSION_EXPIRATION_CONFIG

public static final String ROLE_SESSION_EXPIRATION_CONFIG

See Also:

• Constant Field Values

POLICY_CONFIG

public static final String POLICY_CONFIG

See Also:

• Constant Field Values

STS_ENDPOINT_CONFIG

public static final String STS_ENDPOINT_CONFIG

See Also:

• Constant Field Values

EXTERNAL_ID_CONFIG

public static final String EXTERNAL_ID_CONFIG

See Also:

• Constant Field Values

Constructor Details

AliCloudKmsDriver

public AliCloudKmsDriver()

Method Details

getKeyUrlPrefix

public String getKeyUrlPrefix()

Specified by:

getKeyUrlPrefix in interface KmsDriver

isAccessDeniedException

public boolean isAccessDeniedException(Throwable t)

Specified by:

isAccessDeniedException in interface KmsDriver

newKmsClient

public com.google.crypto.tink.KmsClient newKmsClient(Map<String,?> configs,
 Optional<String> kekUrl)
                                              throws GeneralSecurityException

Specified by:

newKmsClient in interface KmsDriver

Throws:

GeneralSecurityException