Skip to content

feat: add enterprise encryption keys - #311

Open
alongubkin wants to merge 24 commits into
alon/alien-440-add-project-scoped-external-ids-to-deployment-groupsfrom
alon/alien-442-build-encryption-gateway-and-enterprise-key-support
Open

feat: add enterprise encryption keys#311
alongubkin wants to merge 24 commits into
alon/alien-440-add-project-scoped-external-ids-to-deployment-groupsfrom
alon/alien-442-build-encryption-gateway-and-enterprise-key-support

Conversation

@alongubkin

@alongubkin alongubkin commented Aug 4, 2026

Copy link
Copy Markdown
Member

Summary

  • add retained alien.Key resources for AWS, GCP, and Azure
  • import, observe, and resolve keys through Remote Bindings with narrow cryptographic access
  • add Storage.encryptionKey(key) with provider-native Terraform and CloudFormation support
  • validate Azure's account-wide CMK boundary instead of implying per-container isolation

Validation

  • Rust core, preflight, permission, Terraform, and CloudFormation tests
  • TypeScript typecheck, lint, and Storage API tests
  • generated Terraform validated with the AWS, GCP, and Azure providers

Generated TypeScript schemas were refreshed with pnpm --filter @alienplatform/core generate. Real-cloud qualification is still in progress, so this PR remains draft.

@alongubkin alongubkin changed the title alon/alien 442 build encryption gateway and enterprise key support feat: add enterprise encryption keys Aug 4, 2026
@alongubkin
alongubkin marked this pull request as ready for review August 4, 2026 04:49
@greptile-apps

greptile-apps Bot commented Aug 4, 2026

Copy link
Copy Markdown

Too many files changed for review (216 files, 100 file limit).

Bypass the limit by tagging @greptile-apps to review.

…encryption-gateway-and-enterprise-key-support

# Conflicts:
#	client-sdks/platform/openapi.json
#	client-sdks/platform/rust/openapi-3.0.json
#	client-sdks/platform/rust/openapi.json
#	crates/alien-bindings/src/lib.rs
#	crates/alien-bindings/src/refreshing.rs
#	packages/core/src/index.ts
…yment-groups' into alon/alien-442-build-encryption-gateway-and-enterprise-key-support

# Conflicts:
#	client-sdks/platform/openapi.json
#	client-sdks/platform/rust/openapi-3.0.json
#	client-sdks/platform/rust/openapi.json
…yment-groups' into alon/alien-442-build-encryption-gateway-and-enterprise-key-support
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant