aws-sdk-java-v2-kms

SKILL.md

AWS SDK for Java 2.x - AWS KMS (Key Management Service)

Overview

Provides AWS KMS patterns using AWS SDK for Java 2.x. Covers key management, encryption/decryption, envelope encryption, digital signatures, and Spring Boot integration.

Instructions

Set Up IAM Permissions - Grant kms:* actions with least privilege

Create KMS Client - Instantiate KmsClient with region and credentials

Create Keys - Use createKey() → Verify key state is ENABLED before proceeding

Set Key Policies - Define key usage permissions → Test access before production

Encrypt Data - Use encrypt() for data <4KB; Verify ciphertext is not empty

Envelope Encryption - For larger data, use generateDataKey() → Verify data key generation succeeded

Digital Signatures - Create signing keys → Verify signatureValid=true after sign/verify

Key Rotation - Enable auto-rotation → Confirm rotation schedule is active

When to Use