Java AWSKMSClient.setRegion方法代码示例

import com.amazonaws.services.kms.AWSKMSClient; //导入方法依赖的package包/类
/**
 * Creates and returns a new instance of AWS KMS client in the case when
 * an explicit AWS KMS client is not specified.
 */
private AWSKMSClient newAWSKMSClient(
        AWSCredentialsProvider credentialsProvider,
        ClientConfiguration clientConfig,
        CryptoConfiguration cryptoConfig,
        RequestMetricCollector requestMetricCollector
) {
    final AWSKMSClient kmsClient = new AWSKMSClient(
        credentialsProvider, clientConfig, requestMetricCollector);
    final Region kmsRegion = cryptoConfig.getAwsKmsRegion();
    if (kmsRegion != null)
        kmsClient.setRegion(kmsRegion);
    return kmsClient;
}
 

import com.amazonaws.services.kms.AWSKMSClient; //导入方法依赖的package包/类
public AWSKMSClient build() {
    ClientConfiguration config = new ClientConfiguration();
    if (!Util.fixNull(host).trim().isEmpty()) {
        config.setProxyHost(this.host);
        config.setProxyPort(this.port);
    }
    AWSKMSClient client = new AWSKMSClient(new DefaultAWSCredentialsProviderChain(), config);
    if (!Util.fixNull(region).trim().isEmpty()) {
        client.setRegion(Region.getRegion(Regions.fromName(region)));
    }
    return client;
}
 

import com.amazonaws.services.kms.AWSKMSClient; //导入方法依赖的package包/类
/**
 * Returns a KMS client for the given region.  Clients are cached by region.
 *
 * @param region Region to configure a client for
 * @return AWS KMS client
 */
public AWSKMSClient getClient(Region region) {
    AWSKMSClient client = kmsClientMap.get(region);

    if (client == null) {
        final AWSKMSClient newClient = new AWSKMSClient();
        newClient.setRegion(region);
        kmsClientMap.put(region, newClient);
        client = newClient;
    }

    return client;
}
 

import com.amazonaws.services.kms.AWSKMSClient; //导入方法依赖的package包/类
/**
 * Authenticates with Cerberus and decrypts and sets the token and expiration details.
 *
 * @param iamPrincipalArn AWS IAM principal ARN used to auth with cerberus
 * @param region          AWS Region used in auth with cerberus
 */
protected void getAndSetToken(final String iamPrincipalArn, final Region region) {
    final AWSKMSClient kmsClient = new AWSKMSClient();
    kmsClient.setRegion(region);

    final String encryptedAuthData = getEncryptedAuthData(iamPrincipalArn, region);
    final VaultAuthResponse decryptedToken = decryptToken(kmsClient, encryptedAuthData);
    final DateTime expires = DateTime.now(DateTimeZone.UTC)
            .plusSeconds(decryptedToken.getLeaseDuration() - paddingTimeInSeconds);

    credentials = new TokenVaultCredentials(decryptedToken.getClientToken());
    expireDateTime = expires;
}
 

import com.amazonaws.services.kms.AWSKMSClient; //导入方法依赖的package包/类
/**
 * Decrypts the given encrypted bytes with the given encryption context.
 * Assumes the runtime has access to the desired AWS environment.
 *
 * @param region            the region
 * @param encryptionContext optional encryption context
 * @param encryptedBytes    the encrypted bytes
 * @return the decrypted bytes
 */
public static byte[] decrypt(Region region, Map<String, String> encryptionContext, byte[] encryptedBytes) {
    DecryptRequest decryptRequest = new DecryptRequest();
    decryptRequest.setEncryptionContext(encryptionContext);
    decryptRequest.setCiphertextBlob(ByteBuffer.wrap(encryptedBytes));

    AWSKMSClient client = new AWSKMSClient();
    client.setRegion(region);
    DecryptResult decryptResult = client.decrypt(decryptRequest);

    return decryptResult.getPlaintext().array();
}