rails_master_key_kms_decrypter 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 404cfff4aa982f0f310fe54cf113afe2e03136c17c137afd04386d4c9bfadbe8
+  data.tar.gz: c7a495d2b49ab78610b76ddf2e7268ecc74baeeb453e227256f18720641064ba
+SHA512:
+  metadata.gz: 27794526219712820007cc1097be1e9965efe3a2ba81303b52d4fba38e7797c2369bbcacaa452add8b567168c0d5f94becbc53cf5f9f3545aea7b0e9ae2d7bfa
+  data.tar.gz: 26cc8a44b4f5f1693415c0de995b424bcca6ea7a0334731f575be50f42d69e7b591e3853100a1dc9accf97f3b902e39558bc17e59c0bf6f9901a347fb85b4578

data/.gitignore

@@ -0,0 +1,11 @@
+/.bundle/
+/.yardoc
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+
+# rspec failure tracking
+.rspec_status

data/.rspec

@@ -0,0 +1,3 @@
+--format documentation
+--color
+--require spec_helper

data/.rubocop.yml

@@ -0,0 +1,77 @@
+AllCops:
+  Exclude:
+    - 'bin/*'
+    - 'db/**/*'
+    - 'vendor/**/*'
+    - '**/Rakefile'
+    - '**/config.ru'
+    - 'node_modules/**/*'
+  TargetRubyVersion: 2.5
+  DisplayCopNames: true
+
+Performance:
+  Enabled: false
+
+Bundler:
+  Enabled: false
+
+Naming:
+  Enabled: false
+
+Metrics/BlockNesting:
+  Enabled: false
+
+Metrics/ClassLength:
+  Enabled: false
+
+Metrics/LineLength:
+  Enabled: false
+
+Metrics/MethodLength:
+  Enabled: false
+
+Metrics/BlockLength:
+  Enabled: false
+
+Metrics/ModuleLength:
+  Enabled: false
+
+Style/AsciiComments:
+  Enabled: false
+
+Style/BlockDelimiters:
+  Exclude:
+    - 'spec/**/*'
+
+Style/Documentation:
+  Enabled: false
+
+Style/BlockDelimiters:
+  Enabled: false
+
+Style/DoubleNegation:
+  Enabled: false
+
+Style/GuardClause:
+  Enabled: false
+
+Style/ClassAndModuleChildren:
+  Enabled: false
+
+Style/SpecialGlobalVars:
+  Enabled: false
+
+Style/NumericPredicate:
+  Enabled: false
+
+Style/Lambda:
+  Enabled: false
+
+Layout/AlignParameters:
+  EnforcedStyle: with_fixed_indentation
+
+Layout/MultilineMethodCallIndentation:
+  EnforcedStyle: indented
+
+Lint/AmbiguousRegexpLiteral:
+  Enabled: false

data/.spec_helper

@@ -0,0 +1 @@
+--require spec_helper

data/.travis.yml

@@ -0,0 +1,5 @@
+sudo: false
+language: ruby
+rvm:
+  - 2.5.0
+before_install: gem install bundler -v 1.16.1

data/Gemfile

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+source 'https://rubygems.org'
+
+git_source(:github) { |repo_name| "https://github.com/#{repo_name}" }
+
+# Specify your gem's dependencies in rails_master_key_kms_decrypter.gemspec
+gemspec
+
+gem 'pry'

data/Gemfile.lock

@@ -0,0 +1,174 @@
+PATH
+  remote: .
+  specs:
+    rails_master_key_kms_decrypter (0.1.0)
+      aws-sdk-kms
+      rails (>= 5.2.0.rc1)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    actioncable (5.2.0.rc1)
+      actionpack (= 5.2.0.rc1)
+      nio4r (~> 2.0)
+      websocket-driver (>= 0.6.1)
+    actionmailer (5.2.0.rc1)
+      actionpack (= 5.2.0.rc1)
+      actionview (= 5.2.0.rc1)
+      activejob (= 5.2.0.rc1)
+      mail (~> 2.5, >= 2.5.4)
+      rails-dom-testing (~> 2.0)
+    actionpack (5.2.0.rc1)
+      actionview (= 5.2.0.rc1)
+      activesupport (= 5.2.0.rc1)
+      rack (~> 2.0)
+      rack-test (>= 0.6.3)
+      rails-dom-testing (~> 2.0)
+      rails-html-sanitizer (~> 1.0, >= 1.0.2)
+    actionview (5.2.0.rc1)
+      activesupport (= 5.2.0.rc1)
+      builder (~> 3.1)
+      erubi (~> 1.4)
+      rails-dom-testing (~> 2.0)
+      rails-html-sanitizer (~> 1.0, >= 1.0.3)
+    activejob (5.2.0.rc1)
+      activesupport (= 5.2.0.rc1)
+      globalid (>= 0.3.6)
+    activemodel (5.2.0.rc1)
+      activesupport (= 5.2.0.rc1)
+    activerecord (5.2.0.rc1)
+      activemodel (= 5.2.0.rc1)
+      activesupport (= 5.2.0.rc1)
+      arel (>= 9.0)
+    activestorage (5.2.0.rc1)
+      actionpack (= 5.2.0.rc1)
+      activerecord (= 5.2.0.rc1)
+      marcel (~> 0.3.1)
+    activesupport (5.2.0.rc1)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (~> 0.7)
+      minitest (~> 5.1)
+      tzinfo (~> 1.1)
+    arel (9.0.0)
+    ast (2.4.0)
+    aws-partitions (1.63.0)
+    aws-sdk-core (3.15.0)
+      aws-partitions (~> 1.0)
+      aws-sigv4 (~> 1.0)
+      jmespath (~> 1.0)
+    aws-sdk-kms (1.5.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sigv4 (1.0.2)
+    builder (3.2.3)
+    coderay (1.1.2)
+    concurrent-ruby (1.0.5)
+    crass (1.0.3)
+    diff-lcs (1.3)
+    erubi (1.7.0)
+    globalid (0.4.1)
+      activesupport (>= 4.2.0)
+    i18n (0.9.5)
+      concurrent-ruby (~> 1.0)
+    jmespath (1.3.1)
+    loofah (2.2.0)
+      crass (~> 1.0.2)
+      nokogiri (>= 1.5.9)
+    mail (2.7.0)
+      mini_mime (>= 0.1.1)
+    marcel (0.3.1)
+      mimemagic (~> 0.3.2)
+    method_source (0.9.0)
+    mimemagic (0.3.2)
+    mini_mime (1.0.0)
+    mini_portile2 (2.3.0)
+    minitest (5.11.3)
+    nio4r (2.2.0)
+    nokogiri (1.8.2)
+      mini_portile2 (~> 2.3.0)
+    parallel (1.12.1)
+    parser (2.5.0.0)
+      ast (~> 2.4.0)
+    powerpack (0.1.1)
+    pry (0.11.3)
+      coderay (~> 1.1.0)
+      method_source (~> 0.9.0)
+    rack (2.0.4)
+    rack-test (0.8.2)
+      rack (>= 1.0, < 3)
+    rails (5.2.0.rc1)
+      actioncable (= 5.2.0.rc1)
+      actionmailer (= 5.2.0.rc1)
+      actionpack (= 5.2.0.rc1)
+      actionview (= 5.2.0.rc1)
+      activejob (= 5.2.0.rc1)
+      activemodel (= 5.2.0.rc1)
+      activerecord (= 5.2.0.rc1)
+      activestorage (= 5.2.0.rc1)
+      activesupport (= 5.2.0.rc1)
+      bundler (>= 1.3.0)
+      railties (= 5.2.0.rc1)
+      sprockets-rails (>= 2.0.0)
+    rails-dom-testing (2.0.3)
+      activesupport (>= 4.2.0)
+      nokogiri (>= 1.6)
+    rails-html-sanitizer (1.0.3)
+      loofah (~> 2.0)
+    railties (5.2.0.rc1)
+      actionpack (= 5.2.0.rc1)
+      activesupport (= 5.2.0.rc1)
+      method_source
+      rake (>= 0.8.7)
+      thor (>= 0.18.1, < 2.0)
+    rainbow (3.0.0)
+    rake (10.5.0)
+    rspec (3.7.0)
+      rspec-core (~> 3.7.0)
+      rspec-expectations (~> 3.7.0)
+      rspec-mocks (~> 3.7.0)
+    rspec-core (3.7.1)
+      rspec-support (~> 3.7.0)
+    rspec-expectations (3.7.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.7.0)
+    rspec-mocks (3.7.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.7.0)
+    rspec-support (3.7.1)
+    rubocop (0.52.1)
+      parallel (~> 1.10)
+      parser (>= 2.4.0.2, < 3.0)
+      powerpack (~> 0.1)
+      rainbow (>= 2.2.2, < 4.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (~> 1.0, >= 1.0.1)
+    ruby-progressbar (1.9.0)
+    sprockets (3.7.1)
+      concurrent-ruby (~> 1.0)
+      rack (> 1, < 3)
+    sprockets-rails (3.2.1)
+      actionpack (>= 4.0)
+      activesupport (>= 4.0)
+      sprockets (>= 3.0.0)
+    thor (0.20.0)
+    thread_safe (0.3.6)
+    tzinfo (1.2.5)
+      thread_safe (~> 0.1)
+    unicode-display_width (1.3.0)
+    websocket-driver (0.7.0)
+      websocket-extensions (>= 0.1.0)
+    websocket-extensions (0.1.3)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  bundler (~> 1.16)
+  pry
+  rails_master_key_kms_decrypter!
+  rake (~> 10.0)
+  rspec (~> 3.0)
+  rubocop
+
+BUNDLED WITH
+   1.16.1

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2018 alpaca-tc
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,94 @@
+# RailsMasterKeyKmsDecrypter
+
+Dynamic decryptier of encrypted `config/master.key` on EC2.
+
+---
+
+Rails5.2 introduced [encrypted credentials](https://www.engineyard.com/blog/rails-encrypted-credentials-on-rails-5.2) 🙌
+
+The key, located on `config/master.key` is created when you run rails new. It doesn't get committed to your repository.
+
+If you using AWS and this gem, you can encrypt `config/master.key` to commit it. 
+After encryping the key, the encrypted key will be saved to `config/master.key.enc`.
+
+The default rails credential decryptor decrypts `config/credentials.yml.enc` from raw master key. 
+After adding this gem, rails decrypts it from encrypted master key.
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'rails_master_key_kms_decrypter' # Recommended: `group: 'production'`
+```
+
+## Usage
+
+### Rails Application
+
+#### 1. Get your KMS key-id from AWS
+
+Create the key at your region on [KMS](https://console.aws.amazon.com/iam/home#/encryptionKeys/)
+
+#### 2. Encrypt your master.key or `RAILS_MASTER_KEY`
+
+Encrypt your `config/master.key`
+
+```sh
+# Create `config/master.key.enc`
+aws kms encrypt --key-id xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --plaintext fileb://config/master.key --output text --query CiphertextBlob > config/master.key.enc
+git add config/master.key.enc
+git commit
+
+# or define `ENCRYPTED_RAILS_MASTER_KEY`
+ENCRYPTED_RAILS_MASTER_KEY=$(aws kms encrypt --key-id xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx --plaintext fileb://config/master.key --output text --query CiphertextBlob)
+```
+
+#### 3. Try to decrypt encrypted credentials
+
+When rails credential decryption is succeeded, `rails_master_key_kms_decrypter` is ready.
+
+```sh
+ENCRYPTED_RAILS_MASTER_KEY=... ./bin/rails runner 'Rails.application.credentials.config.present? ? puts("👍") : puts("👎")'
+```
+
+### AWS resource
+
+#### 1. Create the policy to allow access to KMS
+
+[Create policy](https://console.aws.amazon.com/iam/home#/policies$new)
+
+```
+# Resource is your key
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Action": "kms:Decrypt",
+      "Resource": "arn:aws:kms:ap-northeast-1:012345678900:key/1234567a-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+    }
+  ]
+}
+```
+
+#### 2. Create the role to allow access to KMS
+
+[Create role](https://console.aws.amazon.com/iam/home#/roles$new)
+Choose your resource and attach the policy from before.
+
+#### 3. Attach IAM role to EC2
+
+[Create EC2](https://ap-northeast-1.console.aws.amazon.com/ec2/v2/home?#LaunchInstanceWizard:) and deploy your application.
+
+`RailsMasterKeyKmsDecrypter` need region information.
+Please set `ENV["AWS_REGION"]` or `ENV["RAILS_MASTER_KEY_KMS_DECRYPTER_AWS_REGION"]`.
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/alpaca-tc/rails_master_key_kms_decrypter.
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "rails_master_key_kms_decrypter"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start(__FILE__)

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/lib/rails_master_key_kms_decrypter.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+module RailsMasterKeyKmsDecrypter
+  require 'rails_master_key_kms_decrypter/version'
+  require 'rails_master_key_kms_decrypter/decryption'
+  require 'rails_master_key_kms_decrypter/railtie'
+  require 'rails_master_key_kms_decrypter/kms_encrypted_configuration'
+end

data/lib/rails_master_key_kms_decrypter/decryption.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+require 'base64'
+require 'aws-sdk-kms'
+
+module RailsMasterKeyKmsDecrypter
+  class Decryption
+    attr_reader :client
+
+    def initialize(client_options)
+      @client = Aws::KMS::Client.new(client_options)
+    end
+
+    def decrypt(value, **options)
+      decoded = Base64.strict_decode64(value)
+      response = client.decrypt(ciphertext_blob: decoded, **options)
+      response.plaintext
+    end
+  end
+end

data/lib/rails_master_key_kms_decrypter/kms_encrypted_configuration.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+module RailsMasterKeyKmsDecrypter
+  class KmsEncryptedConfiguration < ActiveSupport::EncryptedConfiguration
+    attr_reader :encrypted_env_key, :encrypted_key_path
+
+    # def initialize(config_path:, key_path:, env_key:, raise_if_missing_key:)
+    def initialize(*)
+      super
+
+      @encrypted_env_key = "ENCRYPTED_#{env_key}"
+      @encrypted_key_path = "#{key_path}.enc"
+    end
+
+    def key
+      read_encrypted_env_key || read_encrypted_key_file || super
+    end
+
+    private
+
+    def read_encrypted_env_key
+      from_encrypted_key(ENV[encrypted_env_key]) if ENV[encrypted_env_key]
+    end
+
+    def read_encrypted_key_file
+      return unless File.exist?(encrypted_key_path)
+      from_encrypted_key(IO.binread(encrypted_key_path).strip)
+    end
+
+    def from_encrypted_key(value)
+      decrypt_master_key(value) if value
+    rescue StandardError
+      nil
+    end
+
+    def decrypt_master_key(value)
+      region = ENV['RAILS_MASTER_KEY_KMS_DECRYPTER_AWS_REGION'] || ENV['AWS_REGION']
+      RailsMasterKeyKmsDecrypter::Decryption.new(region: region).decrypt(value).strip
+    end
+  end
+end

data/lib/rails_master_key_kms_decrypter/railtie.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+require 'rails'
+
+module RailsMasterKeyKmsDecrypter
+  module WithKmsEncryptedConfiguration
+    def encrypted(path, key_path: 'config/master.key', env_key: 'RAILS_MASTER_KEY')
+      RailsMasterKeyKmsDecrypter::KmsEncryptedConfiguration.new(
+        config_path: Rails.root.join(path),
+        key_path: Rails.root.join(key_path),
+        env_key: env_key,
+        raise_if_missing_key: config.require_master_key
+      )
+    end
+  end
+
+  class Railtie < ::Rails::Railtie
+    ::Rails::Application.prepend(WithKmsEncryptedConfiguration)
+  end
+end

data/lib/rails_master_key_kms_decrypter/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module RailsMasterKeyKmsDecrypter
+  VERSION = '0.1.0'
+end

data/rails_master_key_kms_decrypter.gemspec

@@ -0,0 +1,32 @@
+
+# frozen_string_literal: true
+
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'rails_master_key_kms_decrypter/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'rails_master_key_kms_decrypter'
+  spec.version       = RailsMasterKeyKmsDecrypter::VERSION
+  spec.authors       = ['alpaca-tc']
+  spec.email         = ['alpaca-tc@alpaca.tc']
+
+  spec.summary       = 'AWS KMS decryption for rails credentials'
+  spec.description   = 'AWS KMS decryption for rails credentials'
+  spec.homepage      = 'https://github.com/alpaca-tc/rails_master_key_kms_decrypter'
+  spec.license       = 'MIT'
+
+  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+    f.match(%r{^(test|spec|features)/})
+  end
+
+  spec.require_paths = ['lib']
+
+  spec.add_dependency 'aws-sdk-kms'
+  spec.add_dependency 'rails', '>= 5.2.0.rc1'
+
+  spec.add_development_dependency 'bundler', '~> 1.16'
+  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rspec', '~> 3.0'
+  spec.add_development_dependency 'rubocop'
+end

metadata

@@ -0,0 +1,146 @@
+--- !ruby/object:Gem::Specification
+name: rails_master_key_kms_decrypter
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- alpaca-tc
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-02-22 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-kms
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 5.2.0.rc1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 5.2.0.rc1
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: AWS KMS decryption for rails credentials
+email:
+- alpaca-tc@alpaca.tc
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- ".rubocop.yml"
+- ".spec_helper"
+- ".travis.yml"
+- Gemfile
+- Gemfile.lock
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- lib/rails_master_key_kms_decrypter.rb
+- lib/rails_master_key_kms_decrypter/decryption.rb
+- lib/rails_master_key_kms_decrypter/kms_encrypted_configuration.rb
+- lib/rails_master_key_kms_decrypter/railtie.rb
+- lib/rails_master_key_kms_decrypter/version.rb
+- rails_master_key_kms_decrypter.gemspec
+homepage: https://github.com/alpaca-tc/rails_master_key_kms_decrypter
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.3
+signing_key: 
+specification_version: 4
+summary: AWS KMS decryption for rails credentials
+test_files: []