Encrypt Decrypt String using AWS KMS

kms_encrypt_decrypt.ts

import * as aws from "aws-sdk";

const kms = new aws.KMS({ region: "us-east-1" });

async function doStuff() {
	// Encrypt
	const encrypted = await kms.encrypt({
		KeyId: "alias/test-key",
		Plaintext: "abcd",
	}).promise();
	console.log(Buffer.isBuffer(encrypted.CiphertextBlob));
	console.log(encrypted);
	if (Buffer.isBuffer(encrypted.CiphertextBlob)) {
		const encryptedString = Buffer.from(encrypted.CiphertextBlob).toString("base64");
		console.log(encryptedString);

		// store to DynamoDB
		// retrieve from DynamoDB

		// Decrypt
		const result = await kms.decrypt({
			CiphertextBlob: Buffer.from(encryptedString, "base64"),
		}).promise();
		console.log(result);
		if (Buffer.isBuffer(result.Plaintext)) {
			const decrypted = Buffer.from(result.Plaintext).toString();
			console.log(decrypted);
		} else {
			throw new Error("NOT BUFFER 2");
		}

		} else {
			throw new Error("NOT BUFFER");
		}
	}

doStuff().then(() => {
console.log("complete");
}).catch((err) => {
console.error("error", err);
});