CipherStash Keyset Automation

Automated keyset creation and client access management for CipherStash.

Prerequisites

• Bun v1.3.0+

Setup

bun install

Environment Variables

You can get your credentials from the CipherStash Dashboard.

Important

Create an access key with the Control permission.

export CS_CLIENT_ACCESS_KEY="your-access-key"
export CS_WORKSPACE_CRN="crn:region.aws:workspace-id"

Usage

# Create keysets and grant access
bun run index.ts --client-id <client-id>

# Dry run (test without changes)
bun run index.ts --client-id <client-id> --dry-run

Configuration

Edit keysets.json:

[
  {
    "name": "my-keyset",
    "description": "Optional description"
  }
]

Output

• ✓ Success (green)
• ✗ Error (red)
• ℹ Info (blue)
• ⚠ Warning (yellow)
• [1/3] Progress indicator

Troubleshooting

• Auth failed: Check CS_CLIENT_ACCESS_KEY
• Invalid CRN: Format should be crn:<region>.aws:<workspace-id>
• Missing client-id: Use --client-id <id> argument
• Test first: Always run with --dry-run first