It would be nice to support Encryption Context.
It'll allow assigning access to different roles based on context in policy conditions. Additionally, encryption context is tracked in API calls to KMS in Cloudtrail.
Describe the solution you'd like
An additional query string parameter like:
- explicitly specified context
?context_${key}=${value}
- or maybe any parameter that is not currently recognised can be used as a key.
Describe alternatives you've considered
There's no alternative at the moment, except using AWS SDK directly.