smallstep/step-kms-plugin-cloud repository overview

⁠As of April 12, 2023, this package's name is deprecated. Use step-kms-plugin:cloud instead.

See step-kms-plugin⁠ for details.

👉 This is an alternative build of step-kms-plugin⁠ for cloud KMSs. If you need PKCS#11 HSM or Yubikey PIV support, see smallstep/step-kms-plugin⁠ instead.

This cloud-only build of Smallstep's step-kms-plugin⁠ helps manage keys and certificates on cloud KMSs. It can be used independently, or as a plugin for our step CLI tool⁠, which is a command-line swiss army knife for working with X.509, TLS, OAuth OIDC, JWT, OATH OTP, etc.

This image contains both the step and step-kms-plugin binaries, so you can run step kms commands right out of the box.

The following "Key Management Systems" or KMSs are supported, but not all of them provide the full functionality:

• Amazon AWS KMS
• Google Cloud Key Management
• Microsoft Azure Key Vault
• ssh-agent

Documentation is in the GitHub README⁠ for the plugin.

To use this plugin with our step-ca Certificate Authority server⁠, see our Cryptographic Protection⁠ documentation.