[Enhancement]: Post-Quantum Cryptography (PQC) Readiness Observations & Documentation Suggestions
Maintainers usually reply within 2 days
@brmur is already working on this.
Since Jan 30, 2026.
Assessment
This issue has not been assessed yet.
Description
Background story
As organizations begin planning for NIST post-quantum cryptography (PQC) migration,
there is growing demand for practical guidance on how to design crypto-agile systems
using AWS services and SDKs.
While AWS provides strong cryptographic primitives, there is currently no example-level
guidance that helps developers understand how to prepare for hybrid (classical + PQC)
transitions, crypto inventory, and long-term data protection planning.
This example is important to help developers start planning early, before migration
becomes urgent and disruptive.
What does this example accomplish?
This request proposes adding documentation and example guidance for
Post-Quantum Cryptography (PQC) readiness in AWS services.
The example would help customers understand how to:
• Track cryptographic usage (crypto inventory)
• Design crypto-agile systems
• Prepare for hybrid classical + PQC transitions
• Align with NIST post-quantum standards
• Plan long-term data protection (store-now-decrypt-later risk)
This is NOT a vulnerability report.
It is a documentation and readiness feature request based on public AWS behavior and docs.
The goal is to help developers and security teams begin PQC planning early,
before migration becomes urgent.
Happy to help refine or contribute examples if useful.
Which AWS service(s)?
AWS Key Management Service (KMS), AWS CloudHSM, AWS Certificate Manager (ACM), AWS Secrets Manager, AWS IAM, AWS Nitro Enclaves
Which AWS SDKs or tools?
- All languages
- .NET
- C++
- Go (v2)
- Java
- Java (v2)
- JavaScript
- JavaScript (v3)
- Kotlin
- PHP
- Python
- Ruby
- Rust
- Swift
- Not applicable
Are there existing code examples to leverage?
No response
Do you have any reference code?
- Dominant language
- Java
- Stars
- 10.5k
- Forks
- 5.8k
- Avg merge
- 2d 21h
- Merged PRs (30d)
- 30
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from awsdocs/aws-doc-sdk-examples
-
[Enhancement]: Add Go (v2) example: Converse API with extended/adaptive thinking (Bedrock Runtime)May be free again @brmur claimed this 79 days ago, and no pull request is open. OpenGo-v2 New example request
awsdocs/aws-doc-sdk-examples#8093 · 1 assignee ·
Maintainers usually reply within 2 days
-
Modify ListObjectVersions to also show how do list versions of only a single objectMay be free again @brmur claimed this 163 days ago, and no pull request is open. OpenTask
awsdocs/aws-doc-sdk-examples#7914 · 1 assignee ·
Maintainers usually reply within 2 days
-
Create Rust DynamoDB GetItem single action exampleMay be free again @brmur claimed this 171 days ago, and no pull request is open. OpenNew example request Rust
awsdocs/aws-doc-sdk-examples#7913 · 1 assignee ·
Maintainers usually reply within 2 days
-
[Bug]: CloudWatch Logs Large Query Scenario - Offset BugMay be free again @rlhagerm claimed this 198 days ago, and no pull request is open. Open
awsdocs/aws-doc-sdk-examples#7873 · 1 assignee ·
Maintainers usually reply within 2 days
-
[Enhancement]: Update S3 Go code examples to use feature/s3/transfermanager instead of deprecated feature/s3/managerMay be free again @brmur claimed this 198 days ago, and no pull request is open. Open
awsdocs/aws-doc-sdk-examples#7872 · 3 comments · 1 assignee ·
Maintainers usually reply within 2 days
All issues in awsdocs/aws-doc-sdk-examples
Similar issues
-
面渣逆袭Spring事务传播机制勘误Open
Difficulty 1/5 Under an hour Newbie friendliness 80/100
itwanger/toBeBetterJavaer#218 ·
-
Markdown and Astro language servers do not start when the project path contains a non-ASCII character or a spacePossibly taken @RoiSoleil claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
eclipse-wildwebdeveloper/wildwebdeveloper#2277 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
johanhaleby/occurrent#1462 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
SasanLabs/VulnerableApp#912 ·
Maintainers usually reply within 1 day
-
area/build area/events area/storage area/storage/kafkasql area/storage/sql
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Apicurio/apicurio-registry#11079 ·
Maintainers usually reply within 1 day