Metadata-Version: 2.1
Name: sceptre-kms-resolver
Version: 1.0.0
Summary: A Sceptre resolver to retrieve and decrypt values from AWS KMS
Home-page: https://github.com/sceptre/sceptre-kms-resolver
Author: zaro0508
Author-email: zaro0508@gmail.com
License: Apache2
Keywords: sceptre,sceptre-resolver
Platform: UNKNOWN
Classifier: Intended Audience :: Developers
Classifier: Natural Language :: English
Classifier: Environment :: Console
Classifier: Programming Language :: Python :: 2.7
Classifier: Programming Language :: Python :: 3.5
Classifier: Programming Language :: Python :: 3.6
Classifier: Programming Language :: Python :: 3.7
Description-Content-Type: text/markdown
Requires-Dist: packaging (==16.8)
Provides-Extra: test
Requires-Dist: pytest (>=3.2) ; extra == 'test'

# Overview

The purpose of this resolver is to retrieve values from the AWS KMS. 

## Install

```bash
pip install sceptre-kms-resolver
```

## Available Resolvers

### kms

Fetches the value stored in AWS KMS.

Syntax:

```yaml
parameter|sceptre_user_data:
    <name>: !kms CIPHERTEXT
```

#### Example:

Encrypt data with KMS to get a Ciphertext:
```
aws kms --key-id <KMS Key Id> --plaintext <data> --output text --query CiphertextBlob

AQICAHhZyEsV0yflwE0mpKvPz7/O/zc1epgIurV43wXF/qF6MwFQYwZq7TrvtQ2....
```

Use sceptre to retrieve and decrypt the value from KMS:
```
parameters:
    database_password: !kms AQICAHhZyEsV0yflwE0mpKvPz7/O/zc1epgIurV43wXF/qF6MwFQYwZq7TrvtQ2...
```


