Key Management Service (KMS) provides a variety of development tools. You can select a development tool that is suitable for your business requirements.

Development tool Description
KMS SDKs KMS SDKs allow you to construct HTTPS requests to make better use of the KMS API.

KMS SDKs have the following characteristics:

  • KMS SDKs are used together with the core libraries of Alibaba Cloud SDKs. Each SDK interface corresponds to a KMS API operation.
  • KMS SDKs apply to all KMS business scenarios, such as data encryption and decryption, digital signature generation and verification, and dynamic secret acquisition.
Encryption SDKs
Encryption SDKs are client-side encryption libraries that are built on top of the KMS API. Encryption SDKs have the following characteristics:
  • Encryption SDKs encapsulate business logic, best practices, and design patterns based on the KMS API. This allows you to easily integrate the encryption SDKs into business systems.
  • This tool is suitable for business scenarios, such as data encryption and decryption, and digital signature generation and verification.
Secrets Manager Client Secrets Manager Client allows you to configure the frequency at which Secrets Manager Client obtains secrets from Secrets Manager and refreshes the cache. Secrets Manager Client has the following characteristics:
  • Secrets Manager Client encapsulates business logic, best practices, and design patterns based on the Secrets Manager API. This allows you to easily integrate the capabilities of Secrets Manager into business systems.
  • This tool is suitable for business scenarios in which the secrets managed in Secrets Manager are dynamically used. This way, you no longer need to hard code sensitive data.
Secrets Manager JDBC Secrets Manager JDBC allows you to use secrets managed in Secrets Manager by establishing Java Database Connectivity (JDBC) connections. Secrets Manager JDBC has the following characteristics:
  • Secrets Manager JDBC encapsulates business logic, best practices, and design patterns based on the dynamic ApsaraDB RDS secrets of Secrets of Secrets Manager. This allows you to easily integrate the capabilities of Secrets Manager into business systems.
  • This tool is suitable for business scenarios in which the secrets managed in Secrets Manager are dynamically used in database applications. This way, you no longer need to hard code the passwords of database accounts.
Managed secret plug-ins for Alibaba Cloud SDKs Managed secret plug-ins for Alibaba Cloud SDKs allow you to use managed Resource Access Management (RAM) secrets to access Alibaba Cloud services in an efficient manner. Managed secret plug-ins for Alibaba Cloud SDKs have the following characteristics:
  • The plug-ins help developers integrate the capabilities of Secrets Manager into business systems in a more convenient manner based on managed RAM secrets and secret rotation capabilities.
  • The plug-ins implement application-level access control by using application access points. This ensures secret security.
Dedicated KMS SDKs Dedicated KMS SDKs allow you to access the Dedicated KMS API in a simple manner. Dedicated KMS SDKs are suitable for business scenarios such as data encryption and decryption, and digital signature generation and verification. Dedicated KMS SDKs have the following characteristics:
  • Dedicated KMS SDKs encapsulate business logic, best practices, and design patterns based on the Dedicated KMS API. This allows you to easily integrate the capabilities of Dedicated KMS into business systems.
  • You can also use client keys to implement access control in a secure manner.