New returns a single-key KMS that derives new DEKs from the given key.

NewWithConfig returns a new KMS using the given configuration.

Parse parses s as single-key KMS.

Config contains various KMS-related configuration parameters - like KMS endpoints or authentication credentials.

DEK is a data encryption key.

Status describes the current state of a KMS.

IdentityManager is the generic interface that handles KMS identity operations.

KeyManager is the generic interface that handles KMS key operations.

KMS is the generic interface that abstracts over different KMS implementations.

PolicyManager is the generic interface that handles KMS policy] operations.

StatusManager is the generic interface that handles KMS status operations.

Context is a set of key-value pairs that are associated with a generate data encryption key (DEK).