aws-sdk-java-v2-kms

Automate AWS KMS key management and encryption with the AWS SDK for Java 2.x.

Updated Apr 5, 2026

Search Tags:#aws #sdk #encryption #java #spring-boot #kms #envelope-encryption

Ready to run

npx skills add https://github.com/rizaldiem/digital-invitation-web_V2 --skill aws-sdk-java-v2-kms-rizaldiem

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws-sdk-java-v2-kms
Source: https://github.com/rizaldiem/digital-invitation-web_V2/tree/main/.windsurf/skills/aws-sdk-java-v2-kms
Command: npx skills add https://github.com/rizaldiem/digital-invitation-web_V2 --skill aws-sdk-java-v2-kms-rizaldiem

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Provides patterns for AWS Key Management Service (KMS) usage with the AWS SDK for Java 2.x, enabling secure key management, envelope encryption, digital signing, key rotation, and Spring Boot integration for Java applications.

Core Features & Use Cases

Key management: create keys, describe key metadata, enable rotation, and define key policies.
Data encryption and decryption: direct encryption/decryption and envelope encryption for larger data sets.
Digital signatures: generate signing keys and verify signatures using KMS.
Spring Boot integration: configure KMS clients as beans and inject into services for seamless encryption workflows.

Quick Start

Create a KMS client and encrypt a sample string, then decrypt it to verify the workflow.

Frequently Asked Questions about aws-sdk-java-v2-kms

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement envelope encryption in Java using AWS KMS?▼

Envelope encryption in Java with AWS KMS uses the AWS SDK for Java 2.x to generate a data key, encrypts large data locally with that key, and stores the encrypted data key alongside the ciphertext. This approach minimizes KMS API calls and optimizes performance for bulk data.

How do I configure AWS KMS client as a Spring Boot bean for encryption workflows?▼

Configuring an AWS KMS client in Spring Boot involves instantiating the client via AWS SDK for Java 2.x and registering it as a bean. You then inject the KMS client into services to execute key management and data encryption workflows seamlessly.

What is the process for rotating AWS KMS keys in a Java application?▼

Rotating AWS KMS keys in a Java application uses the AWS SDK for Java 2.x to enable automatic key rotation on a managed key. This maintains secure key lifecycle management without requiring application code changes for decrypting existing ciphertexts.

How does digital signature generation and verification work with AWS KMS and Java?▼

Digital signature generation with AWS KMS and Java uses the AWS SDK for Java 2.x to create asymmetric signing keys and sign data payloads. Verification involves calling the KMS API to cryptographically validate the signature against the original data.

Can I manage KMS key policies directly from my Java service?▼

You can manage KMS key policies directly from a Java service using the AWS SDK for Java 2.x. This allows defining key policies, describing key metadata, and creating keys programmatically within secure Spring Boot integration workflows.