Python Services

Fit today: Good — via REST, AWS shim (boto3), or gRPC.

Who

Python backend engineers — Django, FastAPI, Flask developers handling sensitive data (PII, financial records, healthcare data).

How KeyRack serves Python today

Path 1: REST API (available now)

import httpx

client = httpx.Client(base_url="http://localhost:8080")
key = client.post("/v1/keys", json={"key_spec": "AES_256"}).json()

Path 2: AWS KMS shim via boto3 (commercial)

For existing boto3/AWS KMS usage, the commercial AWS KMS shim accepts the same calls with a single endpoint change — see Commercial extensions.

Path 3: gRPC

Generate Python stubs from KeyRack’s protobuf definitions.

What’s ready today

• Full REST API
• AWS KMS shim for brownfield (commercial)
• Structured audit and Cedar authorization

What’s missing

• Python SDK — no published PyPI package yet. High-value new work alongside Go SDK.
• Async-first client library for FastAPI integrations

See Integration guide for AuthN/AuthZ setup.