Hey,
So my users are giving us a secret API key when registering.
This API key is to be used by our backend to make some API calls.
The problem is, at the moment, the keys are encrypted using KMS.
So when the backend is called, it first need to retrieve the key, decrypt it, and then use it to make the external API call.
This creates a lot of latency, which is a problem for our use case.
I was wondering if I could retrieve the key when the user login, and store it somewhere (safe haha), so that it can easily be used by the backend.
Obviously, the key is very sensible, so I don't really know how to approach this. Is it even possible ?
thanks!