Encrypt Sensitive Data Like TPIN before calling client REST API

[sidd3443]

All wanted to check , if below scenario is possible:

1. We will generate symmetric AES 256 Bit encryption key.
2. Load this master key material in AWS KMS.
3. Use this AWS KMS to encrypt the data like TPIN/CC Pin
4. I will call the client REST APIs with the input as encrypted TPIN and Client will have the same master key at their end to decrypt the data.

[Ebenezer_Osei]

Hello,

This forum is centered around Genesys Cloud APIs and SDKs. For general programming/technical questions, I'd recommend you post your question on public programming boards like Stackoverflow.

Regards

[sidd3443]

@sidd3443

ted to check , if below scenario is possible:

1. We will generate symmetric AES 256 Bit encryption key.
2. Load this master key material in AWS KMS.
3. Use this AWS KMS to encrypt the data like TPIN/CC Pin
4. I will call the client REST APIs with the input as encrypted TPIN and Client will have the same master key at their end to decrypt the data.

Hello,

I am looking for some help in Encrypting the client sensitive data like TPIN/CC PIN/Debit Card Pin in Architect Inbound Call Flow before I call the client backend APIs.
I am aware we need to use encrypt data action for this which uses AWS KMS.
But the requirement is Client will provide the Masters Key (AES 256 bit Key ), my simple question is can we load this client provided key in the AWS KMS and then use this AWS Key in the Architect?
I can go on Stake overflow but I will not get help from Genesys experts.