haven-secrets-core/src/aws/encryption/createKeyring.js

Core for Haven, the easy to use centralized secrets manager.

import getMasterKeyFromAlias from "../kms/getMasterKeyFromAlias.js";
import { KmsKeyringNode } from "@aws-crypto/client-node";

const createKeyring = async (keyAlias) => {
  const masterKey = await getMasterKeyFromAlias(keyAlias);
  const generatorKeyId = masterKey.AliasArn.replace(/alias.*/, `key/${masterKey.TargetKeyId}`);
  return new KmsKeyringNode({ generatorKeyId });
};

export default createKeyring;