Add encryption context to KMS (#120)

* Add encryption context to KMS * Fix lint issue
DataDog · Oct 23, 2020 · 98e8853 · 98e8853
1 parent 4e4f12c
commit 98e8853
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/metrics/kms-service.ts b/src/metrics/kms-service.ts
@@ -26,7 +26,8 @@ export class KMSService {
     }
     const buffer = Buffer.from(value, "base64");
 
-    const result = await this.kms.decrypt({ CiphertextBlob: buffer }).promise();
+    const encryptionContext = { LambdaFunctionName: process.env.AWS_LAMBDA_FUNCTION_NAME ?? "" };
+    const result = await this.kms.decrypt({ CiphertextBlob: buffer, EncryptionContext: encryptionContext }).promise();
     if (result.Plaintext === undefined) {
       throw Error("Couldn't decrypt value");
     }