A basic demo toy to show KMS envelope encryption concepts. Not ready for production. Use at your own risk.

• CMK: Customer Master Key - (AWS Concept): represented by a ARN value
• TMK: Tenant Master Key - (implementation concept): represents the per customer key
• TDK: Tenant Data Key - (implementation concept): represents the per customer data item

NB: Requires KMS ARN to be the specified environment var CMKID

export CMKID=arn:aws:kms:{yourregion}:{youraccount}:key/{yourkeyId}
npm run demo

npm test