chore(examples): add version branch key id example (#710)

AwsEncryptionSDK/runtimes/rust/examples/keyring/aws_kms_hierarchical/create_branch_key_id.rs

@@ -11,7 +11,7 @@ use aws_esdk::aws_cryptography_keyStore::types::KmsConfiguration;
  branch key material.
 
  This example demonstrates configuring a KeyStore and then
- using a helper method to create a branch key.
+ uses a helper method to create a branch key.
 */
 pub async fn create_branch_key_id(
     key_store_table_name: &str,

AwsEncryptionSDK/runtimes/rust/examples/keyring/aws_kms_hierarchical/mod.rs

@@ -3,5 +3,6 @@
 
 pub mod aws_kms_hierarchical_keyring_example;
 pub mod create_branch_key_id;
+pub mod version_branch_key_id_example;
 pub mod example_branch_key_id_supplier;
 pub mod shared_cache_across_hierarchical_keyrings_example;

AwsEncryptionSDK/runtimes/rust/examples/keyring/aws_kms_hierarchical/version_branch_key_id_example.rs

@@ -0,0 +1,68 @@
+// Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+use aws_esdk::aws_cryptography_keyStore::client as keystore_client;
+use aws_esdk::aws_cryptography_keyStore::types::key_store_config::KeyStoreConfig;
+use aws_esdk::aws_cryptography_keyStore::types::KmsConfiguration;
+
+/*
+ This example demonstrates configuring a KeyStore and then
+ uses a helper method to version a branch key.
+*/
+pub async fn version_branch_key_id(
+    key_store_table_name: &str,
+    logical_key_store_name: &str,
+    kms_key_arn: &str,
+    branch_key_id: &str
+) -> Result<(), crate::BoxError> {
+    // Create a Key Store
+    // The KMS Configuration you use in the KeyStore MUST have the right access to the resources in the KeyStore.
+    let sdk_config = aws_config::load_defaults(aws_config::BehaviorVersion::latest()).await;
+    let key_store_config = KeyStoreConfig::builder()
+        .kms_client(aws_sdk_kms::Client::new(&sdk_config))
+        .ddb_client(aws_sdk_dynamodb::Client::new(&sdk_config))
+        .ddb_table_name(key_store_table_name)
+        .logical_key_store_name(logical_key_store_name)
+        .kms_configuration(KmsConfiguration::KmsKeyArn(kms_key_arn.to_string()))
+        .build()?;
+
+    let keystore = keystore_client::Client::from_conf(key_store_config)?;
+
+    // To version a branch key you MUST have access to kms:ReEncrypt* and kms:GenerateDataKeyWithoutPlaintext
+    keystore.version_key()
+        .branch_key_identifier(branch_key_id)
+        .send()
+        .await?;
+
+    println!("Version Branch Key Example Completed Successfully");
+
+    Ok(())
+}
+
+// Function to test version_branch_key_id in main.rs in examples directory
+pub async fn create_and_version_branch_key_id() -> Result<(), crate::BoxError2> {
+    use crate::example_utils::utils;
+    use super::create_branch_key_id::create_branch_key_id;
+
+    let branch_key_id: String = create_branch_key_id(
+        utils::TEST_KEY_STORE_NAME,
+        utils::TEST_LOGICAL_KEY_STORE_NAME,
+        utils::TEST_KEY_STORE_KMS_KEY_ID
+    ).await?;
+
+    version_branch_key_id(
+        utils::TEST_KEY_STORE_NAME,
+        utils::TEST_LOGICAL_KEY_STORE_NAME,
+        utils::TEST_KEY_STORE_KMS_KEY_ID,
+        &branch_key_id
+    ).await?;
+
+    Ok(())
+}
+
+#[tokio::test(flavor = "multi_thread")]
+pub async fn test_version_branch_key_id() -> Result<(), crate::BoxError2> {
+    // Test function for Version Branch Key example
+    create_and_version_branch_key_id().await?;
+    Ok(())
+}

AwsEncryptionSDK/runtimes/rust/examples/main.rs

@@ -188,6 +188,8 @@ pub async fn main() -> Result<(), BoxError2> {
         utils::TEST_KEY_STORE_KMS_KEY_ID
     ).await?;
 
+    keyring::aws_kms_hierarchical::version_branch_key_id_example::create_and_version_branch_key_id().await?;
+
     keyring::aws_kms_hierarchical::shared_cache_across_hierarchical_keyrings_example::encrypt_and_decrypt_with_keyring(
         utils::TEST_EXAMPLE_DATA,
         utils::TEST_KEY_STORE_NAME,