mirror of
https://github.com/gravitational/teleport.git
synced 2026-09-21 14:35:22 +08:00
Julia Ogris
565947d136
* access-graph: Add KMS resource protos Add the `AWSKMSKeyV1` protobuf messages to support importing KMS key into the access graph. This new type is added to the `AWSResource` oneof. The Go bindings were regenerated using `make grpc`. * access-graph: Add AWS KMS key discovery to access graph Implement AWS KMS keys discovery and ingest into access graph. The fetcher discovers keys across all specified regions. For each KMS key, the fetcher retrieves the following details: * Key metadata, including ARN, creation date, and HSM cluster ID * Resource tags * Key aliases * The key policy document Add a mock KMS client to support comprehensive unit testing of the new fetcher, covering various key configurations and error cases. The new KMS key resource is integrated into the existing discovery framework, including the merge, deduplication, and reconciliation steps. The required IAM policy for access graph discovery is updated to include the necessary `kms:` permissions. Correct typo in the `GlueTableName` field name. * Address review feedback * Address second set of review feedback * Regenerate go-bindings for proto * Fix golden files with new AWS KMS actions