second first commit

2026-09-22 08:57:00 -04:00
parent e88d7e2ff3
commit 0aef7fb2d8
4766 changed files with 1236986 additions and 0 deletions
@@ -0,0 +1,75 @@
+/**
+ * KMS integration tests.
+ */
+
+import { describe, it, expect, beforeAll } from 'vitest';
+import {
+  KMSClient,
+  CreateKeyCommand,
+  ListKeysCommand,
+  DescribeKeyCommand,
+  EncryptCommand,
+  DecryptCommand,
+  GenerateDataKeyCommand,
+  GenerateRandomCommand,
+} from '@aws-sdk/client-kms';
+import { makeClient, uniqueName } from './setup';
+
+describe('KMS', () => {
+  let kms: KMSClient;
+  let keyId: string;
+  let ciphertext: Uint8Array;
+
+  beforeAll(() => {
+    kms = makeClient(KMSClient);
+  });
+
+  it('should create key', async () => {
+    const response = await kms.send(
+      new CreateKeyCommand({ Description: `test-key-${uniqueName()}` })
+    );
+    keyId = response.KeyMetadata!.KeyId!;
+    expect(keyId).toBeTruthy();
+  });
+
+  it('should describe key', async () => {
+    const response = await kms.send(new DescribeKeyCommand({ KeyId: keyId }));
+    expect(response.KeyMetadata?.Enabled).toBe(true);
+  });
+
+  it('should list keys', async () => {
+    const response = await kms.send(new ListKeysCommand({}));
+    expect(response.Keys?.some((k) => k.KeyId === keyId)).toBe(true);
+  });
+
+  it('should encrypt data', async () => {
+    const response = await kms.send(
+      new EncryptCommand({
+        KeyId: keyId,
+        Plaintext: Buffer.from('hello from test'),
+      })
+    );
+    ciphertext = response.CiphertextBlob!;
+    expect(ciphertext).toBeTruthy();
+  });
+
+  it('should decrypt data', async () => {
+    const response = await kms.send(new DecryptCommand({ CiphertextBlob: ciphertext }));
+    const plaintext = Buffer.from(response.Plaintext!).toString();
+    expect(plaintext).toBe('hello from test');
+  });
+
+  it('should generate data key', async () => {
+    const response = await kms.send(
+      new GenerateDataKeyCommand({ KeyId: keyId, KeySpec: 'AES_256' })
+    );
+    expect(response.Plaintext).toBeTruthy();
+    expect(response.CiphertextBlob).toBeTruthy();
+  });
+
+  it('should generate random bytes', async () => {
+    const response = await kms.send(new GenerateRandomCommand({ NumberOfBytes: 32 }));
+    expect(response.Plaintext).toBeTruthy();
+    expect(response.Plaintext!.byteLength).toBe(32);
+  });
+});