An implementation of IXmlRepository for S3 storage for use in ASP.NET Core.
This allows ASP.NET Core to store its keys in S3. (For information on the IXmlRepository class see here: http://docs.asp.net/en/latest/security/data-protection/extensibility/key-management.html#ixmlrepository)
This is useful in load balancing scenarios where cookies would otherwise be encrypted using different keys.
Items are encrypted at rest in S3 using AES256.
In Startup.cs:
public void ConfigureServices(IServiceCollection services)
{
//...
var s3XmlRepositoryConfiguration = new S3XmlRepositoryConfiguration { BucketName = "my-secure-bucket" };
services.ConfigureDataProtection(configure =>
{
configure.PersistKeysToS3(s3XmlRepositoryConfiguration);
});
services.AddTransient<AWSCredentials, StoredProfileAWSCredentials>();
services.AddInstance(RegionEndpoint.GetBySystemName("my-region"));
services.AddTransient<AmazonS3Client>();
//...
}This example uses the StoredProfileAWSCredentials. Other implementations of AWSCredentials are available in the AWS SDK.