Implements envelope encryption with AWS KMS, encrypting data locally with a data encryption key (DEK) and protecting that DEK with a KMS-managed key (KEK), covering the encrypt/decrypt flow, KMS key types, and security validation criteria. Use when designing key management for encrypting large or numerous data objects on AWS, or when reducing direct KMS API call volume.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-envelope-encryption-with-aws-kmsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-envelope-encryption-with-aws-kms -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-envelope-encryption-with-aws-kms -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-envelope-encryption-with-aws-kmsgh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-envelope-encryption-with-aws-kmsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-envelope-encryption-with-aws-kms ~/.claude/skills/implementing-envelope-encryption-with-aws-kms # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-envelope-encryption-with-aws-kms ~/.agents/skills/implementing-envelope-encryption-with-aws-kms # Codex, Cursor, Gemini CLI, Copilot, OpenCode