New returns a single-key KMS that derives new DEKs from the given key.

NewWithConfig returns a new KMS using the given configuration.

Parse parses s as single-key KMS.

Config contains various KMS-related configuration parameters - like KMS endpoints or authentication credentials.

DEK is a data encryption key.

Status describes the current state of a KMS.

KMS is the generic interface that abstracts over different KMS implementations.

Context is a set of key-value pairs that are associated with a generate data encryption key (DEK).