SOPS in case of Customer Self Service

[anjimadduri]

Hello Team,

We are using SOPS with AWS KMS in our project and recently started to implement customer self service where we need to provide a chance to customer to encrypt and decrypt their secrets on their own. To achieve this, we need to provide a KMS key to customer and access to our AWS environment.

We have tried to acheive this by AWS Lambda with docker (installed SOPS) + API Gateway. The customer can directly call the API with curl command and try to encrypt the secrets. The problem here is with authentication and authorization to our AWS account which takes lot of time to implement.

Is there any easiest way to implement SOPS with KMS in the context of customer self service?

Thanks,
Anji