Skip to content

Conversation

@MikeCollingwood
Copy link
Contributor

@MikeCollingwood MikeCollingwood commented Sep 22, 2025

Proposed changes

What changed

  • Allow InitialiseIpvSession to decrypt with any KMS key

Why did it change

  • So we can rotate keys in future. At the moment we don't allow decryption with different keys, which means this would have to be updated exactly when we update the key, which we cannot do.

Issue tracking

Checklists

  • READMEs and documentation up-to-date
  • API/ unit/ contract tests have been written/ updated
  • No risk of exposure: PII, credentials, etc through logs/ code
  • Production changes appropriately staged out

@MikeCollingwood MikeCollingwood requested review from a team as code owners September 22, 2025 10:58
@sonarqubecloud
Copy link

@MikeCollingwood MikeCollingwood merged commit 9dd750d into main Sep 22, 2025
8 checks passed
@MikeCollingwood MikeCollingwood deleted the pyic-8298-staging-permissions branch September 22, 2025 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants