aws-sdk-java-v2-kms

AWS KMS key management, encryption, and digital signing for Java applications with envelope encryption and Spring Boot integration. Provides AWS KMS patterns using AWS SDK for Java 2.x. Covers key management, encryption/decryption, envelope encryption, digital signatures, and Spring Boot integration. For detailed implementation patterns, advanced techniques, and comprehensive examples: - Covers key creation, encryption/decryption, envelope encryption for large data, digital signatures, and key rotation using AWS SDK for Java 2.x - Includes synchronous and asynchronous client setup, Spring Boot service configuration, and IAM permission patterns - Provides envelope encryption patterns to reduce KMS API calls and support data larger than 4KB limit - Demonstrates Spring Boot integration with configuration beans and injectable encryption services - Set Up IAM Permissions - Grant kms:* actions with least privilege - Create KMS Client - Instantiate KmsClient with region and credentials - Create Keys - Use createKey() → Verify key state is ENABLED before proceeding - Set Key Policies - Define key usage permissions → Test access before production - Encrypt Data - Use encrypt() for data <4KB; Verify ciphertext is not empty - Envelope Encryption - For larger data, use generateDataKey() → Verify data key generation succeeded - Digital Signatures - Create signing keys → Verify...