-
Type: Improvement
-
Resolution: Fixed
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: drivers, Field Level Encryption
-
Labels:
-
1
Description
Hello,
For AWS examples there is a python command that does not add up for example:
client_encryption = pymongo.encryption.ClientEncryption( { "aws": { "accessKeyId": "<IAM User Access Key ID>", "secretAccessKey": "<IAM User Secret Access Key>" } }, key_vault_namespace, client, CodecOptions(uuid_representation=STANDARD) ) data_key_id = client_encryption.create_data_key("aws")
The "client" is never defined no where, and the client_encryption.create_data_key("aws") expects to get actually a master_key parameter, eg:
data_key_id = client_encryption.create_data_key(kms_provider="aws",master_key = { "region": "eu-west-1","key": "arn:aws:kms:eu-west-1:..."})
I think those are critical for people to onboard FLE succesfully.
FYI
Scope of changes
As a user, I understand where variables are defined that are used in examples.
Refer to the companion project and the other languages in the guide for context on this project.