Aws Sdk Java V2 Kms

This one handles AWS KMS operations in Java applications when you need proper encryption key management instead of rolling your own crypto. It covers the envelope encryption pattern for large data (generate a data key, encrypt locally, store the encrypted key), direct encrypt/decrypt for small payloads under 4KB, and digital signatures with asymmetric keys. The code examples include verification checks after key operations, which is good because KMS calls can fail silently if permissions are misconfigured. Useful if you're building a Spring Boot app that needs to encrypt database fields, sign API tokens, or implement automatic key rotation without managing raw key material yourself.

skills.sh installs: 3.8K
GitHub stars: 369
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add giuseppe-trisciuoglio/developer-kit --skill aws-sdk-java-v2-kms --agent claude-code

Installs into .claude/skills of the current project.

Files

AWS SDK for Java 2.x - AWS KMS (Key Management Service)

Overview

Provides AWS KMS patterns using AWS SDK for Java 2.x. Covers key management, encryption/decryption, envelope encryption, digital signatures, and Spring Boot integration.

Instructions

Set Up IAM Permissions - Grant kms:* actions with least privilege
Create KMS Client - Instantiate KmsClient with region and credentials
Create Keys - Use createKey() → Verify key state is ENABLED before proceeding
Set Key Policies - Define key usage permissions → Test access before production
Encrypt Data - Use encrypt() for data <4KB; Verify ciphertext is not empty
Envelope Encryption - For larger data, use generateDataKey() → Verify data key generation succeeded
Digital Signatures - Create signing keys → Verify signatureValid=true after sign/verify
Key Rotation - Enable auto-rotation → Confirm rotation schedule is active