Method _parseKmsAWS

lib/Config.js:662–724

(config)

    }

    _parseKmsAWS(config) {
        if (!config.kmsAWS) {
            return {};
        }
        let kmsAWS = {};

        const { providerName, region, endpoint, ak, sk, tls, noAwsArn } = config.kmsAWS;

        assert(providerName, 'Configuration Error: providerName must be defined in kmsAWS');
        assert(isValidProvider(providerName),
            'Configuration Error: kmsAWS.providerNamer must be lowercase alphanumeric only');
        assert(endpoint, 'Configuration Error: endpoint must be defined in kmsAWS');
        assert(ak, 'Configuration Error: ak must be defined in kmsAWS');
        assert(sk, 'Configuration Error: sk must be defined in kmsAWS');
        assert(['undefined', 'boolean'].some(type => type === typeof noAwsArn),
            'Configuration Error:: kmsAWS.noAwsArn must be a boolean or not set');

        kmsAWS = {
            providerName,
            endpoint,
            ak,
            sk,
        };

        if (region) {
            kmsAWS.region = region;
        }

        if (noAwsArn) {
            kmsAWS.noAwsArn = noAwsArn;
        }

        if (tls) {
            kmsAWS.tls = {};
            if (tls.rejectUnauthorized !== undefined) {
                assert(typeof tls.rejectUnauthorized === 'boolean');
                kmsAWS.tls.rejectUnauthorized = tls.rejectUnauthorized;
            }
            // min & max TLS: One of 'TLSv1.3', 'TLSv1.2', 'TLSv1.1', or 'TLSv1'
            // (see https://nodejs.org/api/tls.html#tlscreatesecurecontextoptions)
            if (tls.minVersion !== undefined) {
                assert(typeof tls.minVersion === 'string',
                    'bad config: KMS AWS TLS minVersion must be a string');
                kmsAWS.tls.minVersion = tls.minVersion;
            }
            if (tls.maxVersion !== undefined) {
                assert(typeof tls.maxVersion === 'string',
                    'bad config: KMS AWS TLS maxVersion must be a string');
                kmsAWS.tls.maxVersion = tls.maxVersion;
            }
            if (tls.ca !== undefined) {
                kmsAWS.tls.ca = this._loadTlsFileArray(tls.ca);
            }
            if (tls.cert !== undefined) {
                kmsAWS.tls.cert = this._loadTlsFileArray(tls.cert);
            }
            if (tls.key !== undefined) {
                kmsAWS.tls.key = this._loadTlsFileArray(tls.key);