Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add key command #66

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add key command #66

wants to merge 1 commit into from

Conversation

justin1121
Copy link
Member

This generates a AWS KMS key with a policy that has the PCRs required by the KMS to perform attestation against decrypt requests.

Example coming soon.

This generates a AWS KMS key with a policy that has the PCRs required by
the KMS to perform attestation against decrypt requests.

Example coming soon.
@justin1121 justin1121 marked this pull request as ready for review December 1, 2022 13:39
use tracing::instrument;
use uuid::Uuid;

pub const KEY_POLICY_TEMPLATE: &str = r##"{
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

any reason why we're not treating this the same way as the CF Template? seems like we already have all the structure to set things up that way, not sure why we'd do differently

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a cloudformation specific thing as far as I can tell.

Comment on lines +127 to +132
// "Measurements": {
// "HashAlgorithm": "Sha384 { ... }",
// "PCR0": "6e5f9f840dd17f3ab4deaf1954e65302642ac4ee4365382afa5ec970045d2a3448f222431208494daa1fa59d78b8b3f8",
// "PCR1": "bcdf05fefccaa8e55bf2c8d6dee9e79bbff31e34bf28a99aa19e6b29c37ee80b214a414b7607236edf26fcb78654e63f",
// "PCR2": "d8afbe78d624566500651d1abd46c87c0b32c6ae309690dcaa26d87f8069a4828a9a95b4ea5c05f765ae8571728becaa"
// },
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this here for a reason or just leftover?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah just forgot to delete.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants