This repository contains the AWS KMS External Keystore (XKS) Proxy API Specification. It is made available under the Creative Commons Attribution-ShareAlike 4.0 International License.
If you discover a potential security issue, please follow these guidelines.
A sample XKS proxy implementing this specification is available at aws-kms-xks-proxy.
A curl based test client that can be used to check if a specific XKS proxy implementation complies with this specification is available at aws-kms-xksproxy-test-client.
Read the AWS News blog on AWS KMS External Key Stores to learn more about the XKS feature in AWS KMS.