Feature: Add support for KeyVault for AWS (AWSKMS)

[kairoaraujo]

No description provided.

[jku]

I would suggest using the Signer architecture in secure-systems-lab/securesystemslib#456 if it does get merged.

Also for reference, I have a initial GCP KMS implementation on the way secure-systems-lab/securesystemslib#442 maybe useful for ideas.

The one thing that's not handled in those two is KMS key creation/import which I assume you'd like to have -- but I have it in my head already, let me know if you need it somewhere else :)

[lukpueh]

FYI: we have a pending AWS signer implementation in secure-systems-lab/securesystemslib#609 (h/t @ianhundere).

[kairoaraujo]

We need to split this issue into two.

• Storage Backend service AWS S3
• Key Vault service AWS KMS

[kairoaraujo]

FYI: we have a pending AWS signer implementation in secure-systems-lab/securesystemslib#609 (h/t @ianhundere).

The above PR is merged 🚀
We can use in RSTUF the localstack in the development environment to create the tests

[kairoaraujo]

Task for implementation

• Task: Implement Key Vault for AWS KMS repository-service-tuf-worker#344