Generate RS256 key pair for asymmetric jwt signing

1. generate-key-pair.fish

openssl genrsa -out jwt-private.pem 2048

openssl rsa -in jwt-private.pem -pubout -out jwt-public.pem

2. private-key-to-secrets-manager.fish

# Put the private key in aws secrets manager
aws secretsmanager create-secret --name my-secret-name --secret-string (base64 jwt-private.pem)

3. public-key-to-s3.fish

# Put the public key in S3 bucket
aws s3 cp jwt-public.pem s3://my-public-key-bucket/jwt-public.pem

4. get-secret-value

aws secretsmanager get-secret-value --secret-id my-secret-name --query 'SecretString' --output text | base64 -D