MasterKeysFromResourceIDString takes a comma separated list of GCP KMS resource IDs and returns a slice of new MasterKeys for them.

NewMasterKeyFromResourceID creates a new MasterKey with the provided resource ID.

KeyTypeIdentifier is the string used to identify a GCP KMS MasterKey.

SopsGoogleCredentialsEnv can be set as an environment variable as either a path to a credentials file, or directly as the variable's value in JSON format.

MasterKey is a GCP KMS key used to encrypt and decrypt the SOPS data key.

CredentialJSON is the Service Account credentials JSON used for authenticating towards the GCP KMS service.