You can finally stop Googling "How to encrypt and decrypt data with AWS KMS." We’re excited to share that the Keyper v0.0.3 release now supports AWS. Keyper simplifies role and key management, encryption, and decryption into three simple commands. We’ll be updating Keyper's step-by-step tutorial soon to show you how to encrypt and decrypt your data in AWS in just a few simple steps.

What Does Keyper Do?

Data security is critical, but managing permissions and encryption keys can be complicated. Keyper streamlines this process, helping companies protect sensitive data and comply with regulations without the complexity.

At Jarrid, we build tools to make data security simple so software developers can focus on the applications and platform engineer can focus on the infrastructure. Keyper simplifies encryption and key management across cloud environments like AWS and GCP, automating key creation, management, and deployment to make encrypting and decrypting data straightforward.

Keyper’s AWS Support

With the Keyper v0.0.3 release, we’ve expanded Keyper to support AWS:

• AWS KMS Key Management: Keyper now fully integrates with AWS KMS, automating the KMS key creation and management within your AWS infrastructure.
• AWS IAM Role Management: Keyper simplifies permissions by automating IAM role creation and assignment, ensuring only authorized access to your encryption keys.
• End-to-End Secure Data Flow: Keyper now supports end-to-end secure data flow in AWS, enabling the deployment of advanced encryption protocols like Direct AES + ACLs Encryption Flow in AWS. Learn more about Keyper's Secure Data Flow.
• Three Simple Commands: Set up an IAM role, create a KMS key, and encrypt/decrypt your data in just three simple commands.
• Implemented with Terraform: Terraform provides auditability and traceability on changes, and it can be easily integrated into any existing CI/CD pipelines, ensuring every configuration update is tracked and monitored.

Demo

Getting Started

Refer to our AWS deployment guide for instructions on how to configure Keyper to deploy to AWS.

After running keyper deploy apply to create the roles and keys accordingly, you can specify to use AWS keys for encryption and decryption with the -s aws option:

keyper data encrypt -s aws -k $KEY_ID --plaintext $SECRET
keyper data decrypt -s aws -k $KEY_ID --ciphertext $CIPHERTEXT

This allows you to easily encrypt and decrypt your data using AWS keys managed by Keyper.

Summary

The Keyper v0.0.3 release marks a significant milestone in simplifying data security for AWS users. With seamless integration of AWS KMS and IAM, as well as support for end-to-end secure data flows, Keyper empowers both developers and platform engineers to manage encryption without the complexity. By leveraging Terraform for infrastructure as code, Keyper ensures that your encryption practices are not only secure but also auditable and easily integrated into your existing CI/CD pipelines.

Let Keyper take care of your data security so you can focus on building great applications and strong infrastructure.