{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"},{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"Encrypts and decrypts data using AWS KMS keys and keyrings, implementing the AWS Encryption SDK specification for Python.","skillfed_tags":["aws-kms","envelope-encryption","cryptography"],"use_cases":["Encrypt application data at rest using AWS KMS keys managed in your AWS account","Decrypt data encrypted by other AWS Encryption SDK implementations across languages","Implement multi-key encryption where multiple KMS keys can decrypt the same ciphertext","Decrypt data when KMS key ARNs are unknown using discovery keyrings with account filters","Migrate from legacy master key provider patterns to modern keyring-based encryption"],"what_it_does":"The AWS Encryption SDK for Python provides a native implementation of AWS's encryption standard, enabling you to encrypt and decrypt data using AWS KMS keys. It wraps cryptography, boto3, attrs, and wrapt to manage encryption workflows, supporting both modern keyring-based approaches and legacy master key provider patterns. The library handles data key generation, encryption, and decryption through configurable keyrings or cryptographic materials managers, with built-in support for multi-key scenarios and discovery-based decryption.\n\nThe package is designed for developers who need to encrypt sensitive data in Python applications using AWS KMS as the key management backend. It abstracts away the complexity of envelope encryption (encrypting data keys with KMS master keys) and provides a straightforward client API for encrypt/decrypt operations. The library has been in production use since 2017 and is actively maintained by AWS.","worth_installing":"Yes. This is a production-grade, actively maintained library from AWS with no known vulnerabilities, permissive licensing, and low install friction. Install it if you need to encrypt/decrypt data with AWS KMS in Python. The modern keyring API requires the optional aws-cryptographic-material-providers library (Python 3.11+), but the core client works with Python 3.8+. The legacy master key provider API is discouraged but still functional."},"id":"aws-encryption-sdk","links":{"html":"https://skillfed.io/packages/aws-encryption-sdk","md":"https://skillfed.io/packages/aws-encryption-sdk.md","pypi":"https://pypi.org/project/aws-encryption-sdk/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-07","license_spdx":null,"license_treatment":"permissive","name":"aws-encryption-sdk","python_support":"unspecified","summary":"AWS Encryption SDK implementation for Python"},"popularity":{"monthly_downloads":3644793,"position":2545,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"4.0.6"}