Erebus.KMS.Google (Erebus v0.2.0-rc.1) View Source

This KMS backend uses Google KMS to encrypt/decrypt DEKs. It requires generated 2048 bit RSA key with OAEP Padding and SHA256 Digest.

Please note that the used key / service account must have access to the following roles:

• Cloud KMS CryptoKey Encrypter/Decrypter
• Cloud KMS CryptoKey Public Key Viewer

When running it, please provide the following options:

config :my_app, :erebus,
  kms_backend: Erebus.KMS.Google,
  google_project: "someproject",
  google_region: "someregion",
  google_keyring: "some_keyring",
  google_goth: MyApp.Goth