second first commit

2026-09-22 08:57:00 -04:00
parent e88d7e2ff3
commit 0aef7fb2d8
4766 changed files with 1236986 additions and 0 deletions
@@ -0,0 +1,76 @@
+package tests
+
+import (
+	"context"
+	"testing"
+
+	"floci-sdk-test-go/internal/testutil"
+
+	"github.com/aws/aws-sdk-go-v2/aws"
+	"github.com/aws/aws-sdk-go-v2/service/kms"
+	kmstypes "github.com/aws/aws-sdk-go-v2/service/kms/types"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestKMS(t *testing.T) {
+	ctx := context.Background()
+	svc := testutil.KMSClient()
+	var keyID string
+
+	// Note: KMS keys cannot be deleted immediately, so we don't clean up
+
+	t.Run("CreateKey", func(t *testing.T) {
+		r, err := svc.CreateKey(ctx, &kms.CreateKeyInput{
+			Description: aws.String("go-test key"),
+		})
+		require.NoError(t, err)
+		keyID = aws.ToString(r.KeyMetadata.KeyId)
+		assert.NotEmpty(t, keyID)
+	})
+
+	t.Run("DescribeKey", func(t *testing.T) {
+		r, err := svc.DescribeKey(ctx, &kms.DescribeKeyInput{KeyId: aws.String(keyID)})
+		require.NoError(t, err)
+		assert.Equal(t, keyID, aws.ToString(r.KeyMetadata.KeyId))
+	})
+
+	t.Run("ListKeys", func(t *testing.T) {
+		r, err := svc.ListKeys(ctx, &kms.ListKeysInput{})
+		require.NoError(t, err)
+		assert.NotEmpty(t, r.Keys)
+	})
+
+	var ciphertext []byte
+
+	t.Run("Encrypt", func(t *testing.T) {
+		r, err := svc.Encrypt(ctx, &kms.EncryptInput{
+			KeyId:     aws.String(keyID),
+			Plaintext: []byte("hello-go-test"),
+		})
+		require.NoError(t, err)
+		ciphertext = r.CiphertextBlob
+		assert.NotEmpty(t, ciphertext)
+	})
+
+	t.Run("Decrypt", func(t *testing.T) {
+		if len(ciphertext) == 0 {
+			t.Skip("No ciphertext from Encrypt")
+		}
+		r, err := svc.Decrypt(ctx, &kms.DecryptInput{
+			CiphertextBlob: ciphertext,
+			KeyId:          aws.String(keyID),
+		})
+		require.NoError(t, err)
+		assert.Equal(t, "hello-go-test", string(r.Plaintext))
+	})
+
+	t.Run("GenerateDataKey", func(t *testing.T) {
+		r, err := svc.GenerateDataKey(ctx, &kms.GenerateDataKeyInput{
+			KeyId:   aws.String(keyID),
+			KeySpec: kmstypes.DataKeySpecAes256,
+		})
+		require.NoError(t, err)
+		assert.Len(t, r.Plaintext, 32)
+	})
+}