feat(audit): add AWS encryption provider audit rules and update encryption provider script

2025-05-12 17:24:58 +02:00
parent 05d1624bdd
commit 4cd933f9f8
4 changed files with 12 additions and 1 deletions
@@ -3,4 +3,6 @@
 # Managed by Ansible.
 export AWS_ACCESS_KEY_ID={{ encryption_aws_access_key_id }}
 export AWS_SECRET_ACCESS_KEY={{ encryption_aws_secret_access_key }}
+mkdir {{ encryption_kms_socket_dir | dirname }} }} 2>/dev/null || true
+chmod 700 {{ encryption_kms_socket_dir | dirname }} 2>/dev/null
 /usr/local/bin/aws-encryption-provider --key={{ encryption_kms_arn }} --region={{ encryption_kms_region }} --listen={{ encryption_kms_socket }}