shiver.me.timbers.aws.lambda.cr.kms.KmsDecryptService Maven / Gradle / Ivy

Go to download
/*
 * Copyright 2017 Karl Bennett
 *
 *    Licensed under the Apache License, Version 2.0 (the "License");
 *    you may not use this file except in compliance with the License.
 *    You may obtain a copy of the License at
 *
 *        http://www.apache.org/licenses/LICENSE-2.0
 *
 *    Unless required by applicable law or agreed to in writing, software
 *    distributed under the License is distributed on an "AS IS" BASIS,
 *    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *    See the License for the specific language governing permissions and
 *    limitations under the License.
 */

package shiver.me.timbers.aws.lambda.cr.kms;

import com.amazonaws.services.kms.AWSKMS;
import com.amazonaws.services.kms.model.DecryptRequest;

import java.nio.ByteBuffer;
import java.util.Map;

import static java.util.Map.Entry;
import static java.util.stream.Collectors.toMap;

/**
 * @author Karl Bennett
 */
class KmsDecryptService {

    private final AWSKMS awskms;

    KmsDecryptService(AWSKMS awskms) {
        this.awskms = awskms;
    }

    Map decrypt(KmsDecryptRequest request) {
        return request.getParameters().entrySet().parallelStream()
            .collect(toMap(Entry::getKey, entry -> decrypt(entry.getValue())));
    }

    private String decrypt(ByteBuffer value) {
        return new String(awskms.decrypt(new DecryptRequest().withCiphertextBlob(value)).getPlaintext().array());
    }
}