3 years ago

Category: Database, Data, Cloud, encryption

by AWS KMS is a Key Management Service that lets you create Cryptographic keys that you can use to encrypt and decrypt data and also other keys.

KMS API uses AWS KMS customer master key (CMK) in the encryption operations and they cannot accept more than 4 KB (4096 bytes) of data.

The password to encrypt is passed to the Plaintext attribute of the encrypted request and key id is retrieved from the environment variable.

In Login Lambda handler, username and password are retrieved from the request like we did in Sign Up.