I am exploring the AWS KMS as a vault for storing the encryption keys. Now I am trying to encrypt the database fields like email.
So, issue whenever there is a read/write for email, I don't want to hit the AWS APIs(using SDK) to encrypt/decrypt.
What I am thinking is that, is there a way I can get the plaintext data key using SDK and store it in memory for some time and uses it for encryption/decryption.
I am playing with SDK but I am not seeing anything to get the data keys.
I need this for two reasons a) Throughput/performance b) Costing reduction
I have my data in in-house physical machines not in AWS