AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption 3.0.0

Prefix Reserved
.NET 8.0 This package targets .NET 8.0. The package is compatible with this framework or higher. 
dotnet add package AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption --version 3.0.0
                    


                    

                
NuGet\Install-Package AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption -Version 3.0.0
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption" Version="3.0.0" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption" Version="3.0.0" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption --version 3.0.0
                    


                    

                
#r "nuget: AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption, 3.0.0"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption@3.0.0
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption&version=3.0.0
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=AWS.AdvancedDotnetDataProviderWrapper.Plugin.KmsEncryption&version=3.0.0
                    


                            Install as a Cake Tool

AWS Advanced .NET Data Provider Wrapper - KMS Encryption Plugin

Overview

This plugin provides transparent client-side column encryption for the AWS Advanced .NET Data Provider Wrapper using AWS Key Management Service (KMS). Values written to a configured column are encrypted before they leave the application, and decrypted after they are read back, so the database only ever stores ciphertext and no application code changes are required.

Encryption uses envelope encryption: a KMS master key protects per-column data keys, and those data keys perform the AES-GCM encryption locally. Data keys are cached in memory so the common path does not call KMS.

Dependencies

This project depends on:

Both are brought in with this package; nothing needs to be added to your project.

Usage

Register the KMS Encryption plugin before using it:

using AwsWrapperDataProvider.Driver.Plugins;
using AwsWrapperDataProvider.Plugin.KmsEncryption.KmsEncryption;

// Register the KMS Encryption plugin
ConnectionPluginChainBuilder.RegisterPluginFactory<KmsEncryptionPluginFactory>(PluginCodes.KmsEncryption);

// Use in connection string
var connectionString = "Server=your-rds-instance.amazonaws.com;" +
                       "Database=mydb;" +
                       "KmsRegion=us-east-1;" +
                       "Plugins=kmsEncryption;";

This plugin also requires encryption metadata tables in the database, which record which columns are encrypted and with which key and algorithm. See the documentation below for the required schema and for how to register a column for encryption.

Documentation

For comprehensive information about client-side encryption and the AWS Advanced .NET Data Provider Wrapper, visit the Using the KMS Encryption Plugin guide.

Product Compatible and additional computed target framework versions.
.NET net8.0 is compatible.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 was computed.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages

This package is not used by any NuGet packages.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
3.0.0 94 9/29/2026

See release notes at https://github.com/aws/aws-advanced-dotnet-data-provider-wrapper/releases