@@ -33,7 +33,7 @@ def __init__(self, **kwargs):
33
33
def _get_raw_key (self , key_id ):
34
34
"""Retrieves a static, randomly generated, RSA key for the specified key id.
35
35
36
- :param str key_id: : User-defined ID for the static key
36
+ :param str key_id: User-defined ID for the static key
37
37
:returns: Wrapping key that contains the specified static key
38
38
:rtype: :class:`aws_encryption_sdk.internal.crypto.WrappingKey`
39
39
"""
@@ -59,7 +59,7 @@ def _get_raw_key(self, key_id):
59
59
60
60
61
61
def cycle_file (key_arn , source_plaintext_filename , botocore_session = None ):
62
- """Encrypts and then decrypts a file using a KMS master key provider and a custom static master
62
+ """Encrypts and then decrypts a file using a KMS master key provider and a custom static master
63
63
key provider. Both master key providers are used to encrypt the plaintext file, so either one alone
64
64
can decrypt it.
65
65
@@ -85,7 +85,9 @@ def cycle_file(key_arn, source_plaintext_filename, botocore_session=None):
85
85
static_master_key_provider = StaticRandomMasterKeyProvider ()
86
86
static_master_key_provider .add_master_key (static_key_id )
87
87
88
- # Create a master key provider that includes the KMS and static master key providers
88
+ # Add the static master key provider to the KMS master key provider
89
+ # The resulting master key provider uses KMS master keys to generate (and encrypt)
90
+ # data keys and static master keys to create an additional encrypted copy of each data key.
89
91
kms_master_key_provider .add_master_key_provider (static_master_key_provider )
90
92
91
93
# Encrypt plaintext with both KMS and static master keys
0 commit comments