Rewiring cryptographic key management system service instances
Embodiments are directed to rewiring a key management system (“KMS”) service instance (“SI”) with associated keys. Embodiments, in response to a request, delete a first SI that is mapped to one or more keys. To restore the keys, embodiments create a second SI and map the second SI to the one or more keys.
1. A method of rewiring a key management system (KMS) service instance (SI) with associated keys, the method comprising:
in response to a request, deleting a first SI corresponding to a user that is mapped to one or more keys, the one or more keys stored in the KMS, the first SI associated with a dedicated first database schema and comprising a first Application Programming Interface (API) that allows access to the one or more keys stored in the KMS, the deletion of the first SI causing the user to have no access to the one or more keys stored in the KMS, wherein the first SI is mapped to the first database schema and is associated with a uniform resource locator (URL) that allows the user to manage the keys;
creating a second SI associated with a dedicated second database schema comprising a second API; and
mapping the second SI to the one or more keys, the mapping provider the user with access to the one or more keys stored in the KMS using the second API, wherein the mapping the second SI to the one or more keys comprises mapping the second SI to the second database schema.
2. The method of claim 1 , wherein deleting the first SI causes access to the keys by the user to be deleted.
3. The method of claim 1 , wherein the keys comprise master encryption keys (MEKs) and are stored in a hardware security module (HSM).
4. The method of claim 1 , wherein in response to the deleting the first SI, the keys are deleted after an expiration of a predefined time period.
5. The method of claim 1 , wherein the mapping is implemented by a mid-tier of the KMS, wherein the mid-tier is implemented by one or more microservices.
6. The method of claim 1 , the deleting the first SI is in response to a prompt to verify a force deletion.
7. The method of claim 1 , wherein the first database schema is deleted in response to the deleting the first SI, and the mapping the second SI to the second database schema comprises mapping the second SI to the deleted first database schema.
8. A key management system (KMS) comprising:
a mid-tier comprising one or more microservices; and
a data tier coupled to mid-tier and comprising one or more hardware security modules (HSMs) and one or more databases;
the mid-tier adapted to, in response to a first request, delete a first service instance (SI) corresponding to a user that is mapped to one or more keys, the one or more keys stored in the KMS, the first SI associated with a dedicated first database schema and comprising a first Application Programming Interface (API) that allows access to the one or more keys stored in the KMS, the deletion of the first SI causing the user to have no acces to the one or more keys stored in the KMS and, in response to a second request, create a second SI associated with a dedicated second database schema comprising a second API, and map the second SI to the one or more keys, the mapping providing the user with access to the one or more keys stored in the KMS using the second API;
wherein the first SI is mapped to the first database schema and is associated with a uniform resource locator (URL) that allows the user to manage the keys, and the mapping the second SI to the one or more keys comprises mapping the second SI to the second database schema.
9. The key management system of claim 8 , wherein deleting the first SI causes access to the keys by the user to be deleted.
10. The key management system of claim 8 , wherein the keys comprise master encryption keys (MEKs) and are stored in the HSMs.
11. The key management system of claim 8 , wherein in response to the deleting the first SI, the keys are deleted after an expiration of a predefined time period.
12. The key management system of claim 8 , the deleting the first SI is in response to a prompt to verify a force deletion.
13. The key management system of claim 8 , wherein the first database schema is deleted in response to the deleting the first SI, and the mapping the second SI to the second database schema comprises mapping the second SI to the deleted first database schema.
14. A non-transitory computer readable medium having instructions stored thereon that, when executed by one or more processors, cause the processors to rewire a key management system (KMS) service instance (SI) with associated keys, the rewiring comprising:
in response to a request, deleting a first SI corresponding to a user that is mapped to one or more keys, the one or more keys stored in the KMS, the first SI associated with a dedicated first database schema and comprising a first Application Programming Interface (API) that allows access to the one or more keys stored in the KMS, the deletion of the first SI causing the user to have no access to the one or more keys stored in the KMS, wherein the first SI is mapped to the first database schema and is associated with a uniform resource locator (URL) that allows the user to manage the keys;
creating a second SI associated with a dedicated second database schema comprising a second API; and
mapping the second SI to the one or more keys, the mapping providing the user with access to the one or more keys stored in the KMS using the second API, wherein the mapping the second SI to the one or more keys comprises mapping the second SI to the second database schema.
15. The computer readable medium of claim 14 , wherein deleting the first SI causes access to the keys by the user to be deleted.
16. The computer readable medium of claim 14 , wherein the keys comprise master encryption keys (MEKs) and are stored in a hardware security module (HSM).
17. The computer readable medium of claim 14 , wherein in response to the deleting the first SI, the keys are deleted after an expiration of a predefined time period.
18. The computer readable medium of claim 14 , wherein the mapping is implemented by a mid-tier of the KMS, wherein the mid-tier is implemented by one or more microservices.
19. The computer readable medium of claim 14 , the deleting the first SI is in response to a prompt to verify a force deletion.
20. The computer readable medium of claim 14 , wherein the first database schema is deleted in response to the deleting the first SI, and the mapping the second SI to the second database schema comprises mapping the second SI to the deleted first database schema.