![](https://github.com/aws/aws-kms-xksproxy-api-spec/actions/workflows/ci.yml/badge.svg)

## AWS KMS External Key Store (XKS) Proxy API Specification

This repository contains the [AWS KMS External Keystore (XKS) Proxy API Specification](xks_proxy_api_spec.md
). It is made available under the [Creative Commons Attribution-ShareAlike 4.0 International License](LICENSE).


If you discover a potential security issue, please follow [these](CONTRIBUTING.md#security-issue-notifications) guidelines.

A sample XKS proxy implementing this specification is available at [aws-kms-xks-proxy](https://github.com/aws-samples/aws-kms-xks-proxy).

A `curl` based test client that can be used to check if a specific XKS proxy implementation complies with this specification is available at [aws-kms-xksproxy-test-client](https://github.com/aws-samples/aws-kms-xksproxy-test-client).

Read the AWS News blog on [AWS KMS External Key Stores](https://aws.amazon.com/blogs/aws/announcing-aws-kms-external-key-store-xks) to learn more about the XKS feature in AWS KMS.