[Discussion]Is it possible to manage the key store through AWS XKS

[Laisky]

Is it possible to manage the key store through AWS XKS proxy instead of a local database or configuration file?

• AWS eXternal Key Stores

I'm not suggesting replacing the local database, but rather exploring the possibility of supporting multiple modes where users can choose to either store the keys locally or derive them from a remote XKS API.

Scenario

Our customers may have three different deployment modes:

1. Cloud: directly using AWS KMS + XKS ✅
2. Offline on-premise deployment: using local-kms ✅
3. Online on-premise deployment: using local-kms + XKS ❓

I would like to discuss about the feasibility of using the third option.