test.sh

#!/usr/bin/env bash
#
#  
#  2017-02-26 7:01 PM
#

# Bash "strict mode header". 
IFS=$'\n\t'
set -euo pipefail
# Path to this script.
SCRIPT_NAME=$(basename ${BASH_SOURCE[0]})
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"

# Script
TEMPFILE=$(mktemp)
BASE64KEY=$(
  aws kms decrypt \
    --region us-east-1 \
    --encryption-context 'KeyType=Chef Service Discovery' \
    --ciphertext-blob fileb:///foreflight/discovery-v2.encrypted-key \
    --output text \
    --query Plaintext
)
KEY=$(echo ${BASE64KEY} | base64 -d)
openssl enc -d -aes-256-cbc -k "${KEY}" -base64 -in /foreflight/discovery-v2.yml