AWS LambdaでKMS復号化を行うサンプル

KmsTest.py

import json
import boto3
import os

from base64 import b64decode

def lambda_handler(event, context):
    ENCRYPTED = os.environ['key1']
    DECRYPTED = boto3.client('kms').decrypt(
        CiphertextBlob=b64decode(ENCRYPTED),
        EncryptionContext={'LambdaFunctionName': os.environ['AWS_LAMBDA_FUNCTION_NAME']}
    )['Plaintext'].decode('utf-8')
    return {
        'statusCode': 200,
        'body': DECRYPTED
    }