Skip to content

feat(aws/kms): add key and alias resources#641

Merged
sam-goodwin merged 2 commits into
alchemy-run:mainfrom
mineiro:feat/aws-kms-key-alias
Jun 18, 2026
Merged

feat(aws/kms): add key and alias resources#641
sam-goodwin merged 2 commits into
alchemy-run:mainfrom
mineiro:feat/aws-kms-key-alias

Conversation

@mineiro

@mineiro mineiro commented Jun 18, 2026

Copy link
Copy Markdown
Contributor

Add AWS.KMS.Key and AWS.KMS.Alias.

This supports creating customer managed keys, updating mutable key settings, scheduling deletion on destroy, and creating or updating aliases.

This should make encrypted AWS resources easier to model directly in Alchemy.

I’m leaving KMS bindings for a follow-up so this PR stays focused on the base resources.

Tests:

  • bun --check on the changed files
  • bunx oxfmt --check on the changed files
  • bunx oxlint on the changed files
  • cd packages/alchemy && bun vitest run test/AWS/KMS/Key.test.ts --reporter=verbose
  • Manual smoke: verified key/alias create, update, retarget, destroy, plus CloudWatch Logs and Secrets Manager encryption

Tests:
- bun --check packages/alchemy/src/AWS/KMS/Key.ts packages/alchemy/src/AWS/KMS/Alias.ts packages/alchemy/src/AWS/KMS/index.ts packages/alchemy/src/AWS/index.ts packages/alchemy/src/AWS/Providers.ts packages/alchemy/test/AWS/KMS/Key.test.ts
- bunx oxfmt packages/alchemy/src/AWS/KMS/Key.ts packages/alchemy/src/AWS/KMS/Alias.ts packages/alchemy/src/AWS/KMS/index.ts packages/alchemy/src/AWS/index.ts packages/alchemy/src/AWS/Providers.ts packages/alchemy/test/AWS/KMS/Key.test.ts --check
- bunx oxlint packages/alchemy/src/AWS/KMS/Key.ts packages/alchemy/src/AWS/KMS/Alias.ts packages/alchemy/src/AWS/KMS/index.ts packages/alchemy/src/AWS/index.ts packages/alchemy/src/AWS/Providers.ts packages/alchemy/test/AWS/KMS/Key.test.ts
- cd packages/alchemy && bun vitest run test/AWS/KMS/Key.test.ts --reporter=verbose
- Manual smoke: verified key/alias create, update, retarget, destroy, CloudWatch Logs encryption, and Secrets Manager encryption
@sam-goodwin

Copy link
Copy Markdown
Contributor

Please remember to open the corresponding distilled PR. I pulled this down and see type errors. YOu're unknowingly modifying ./distilled a dependent git submodule when building resources. This is because of our AGENTS.md. I am doing that this time, just a FYI for follow up PRs

image

@sam-goodwin sam-goodwin merged commit 28f7d3d into alchemy-run:main Jun 18, 2026
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants