Source code for lambda function to encrypt data with kms and store it in s3

encrypt-secrets-lambda.py

import json
import boto3
import base64

def lambda_handler(event, context):
    
    # data, which we will encrypt
    mydata = {
        "secret": "something important", 
        "password": "very_secret_password", 
    }

    kms = boto3.Session().client('kms')
    
    #encrypt the data
    ciphertext = kms.encrypt(
        KeyId='alias/eb-secret', 
        Plaintext=json.dumps(mydata)
    )
    
    encoded_ciphertext = base64.b64encode(ciphertext["CiphertextBlob"])
    
    s3 = boto3.Session(region_name='us-east-1').client('s3')
    
    #put encrypted data into s3 bucket
    response = s3.put_object(
        Body=encoded_ciphertext, 
        Bucket='eb-secret-bucket', 
        Key='secret_data.json',
    )
    
    print(response)