Add key command

Cargo.toml

@@ -13,6 +13,7 @@ keywords = ["aws", "nitro", "enclave"]
 clap = {version = "4.0", features = ["derive"]}
 aws-config = "0.49.0"
 aws-sdk-cloudformation = "0.19.0"
+aws-sdk-kms = "0.19.0"
 failure = "0.1.8"
 tokio = { version = "1", features = ["full"] }
 tracing = "0.1"
@@ -21,3 +22,8 @@ home = "0.5.4"
 rust-embed = "6.4.2"
 rand = "0.8.5"
 serde_json = "1.0"
+serde = { version = "1.0", features = ["derive"] }
+gtmpl = "0.7"
+gtmpl_derive = "0.5"
+gtmpl_value = "0.5"
+uuid = {version = "1.2.2", features = ["v4", "fast-rng"]}

src/bin/nitrogen.rs

@@ -9,7 +9,7 @@ use std::time::Duration;
 use aws_sdk_cloudformation::Client;
 use clap::{Parser, Subcommand};
 use failure::Error;
-use nitrogen::commands::{build, delete, deploy, logs, setup};
+use nitrogen::commands::{build, delete, deploy, key, logs, setup};
 use nitrogen::template::SETUP_TEMPLATE;
 use tracing::{debug, info};
 
@@ -113,6 +113,13 @@ enum Commands {
         #[arg(short, long, default_value_t = String::from("0.0.0.0/0"))]
         ssh_location: String,
     },
+    Key {
+        principal_arn: String,
+
+        /// input EIF location
+        #[arg(short, long, default_value_t = String::from("nitrogen.eif"))]
+        eif: String,
+    },
 }
 
 #[tokio::main]
@@ -281,6 +288,16 @@ async fn main() -> Result<(), Error> {
 
             info!("{:?}", out);
 
+            Ok(())
+        }
+        Commands::Key { principal_arn, eif } => {
+            let shared_config = aws_config::from_env().load().await;
+            let client = aws_sdk_kms::Client::new(&shared_config);
+
+            let out = key(&client, &principal_arn, &eif).await?;
+
+            info!("{:?}", out);
+
             Ok(())
         }
     }

src/commands/build.rs

@@ -48,7 +48,7 @@ pub async fn build(
             "-v",
             "/var/run/docker.sock:/var/run/docker.sock",
             "-v",
-            &format!("{}:/root/build", eif_dir,),
+            &format!("{}:/root/build", eif_dir),
             "capeprivacy/eif-builder:latest",
             "build-enclave",
             "--docker-uri",