KMS encryption / decryption example

Makefile

KEY_ID=arn:aws:kms:eu-central-1:ef96e7f3:key/ef96e7f3-d6f1-4e69-8444-55d90ca3fa25

.PHONY: encrypt-text
encrypt-text: ## encrypt text in format make  SECRET_TEXT=foo encrypt-text into a binary that can be piped to a file
 @aws kms encrypt --key-id ${KEY_ID} --plaintext ${SECRET_TEXT} --query CiphertextBlob --output text | base64 --decode

.PHONY: decrypt-text
decrypt-text: ## decrypt an encrypted binary via make SECRET_BINARY=some_file.bin decrypt-text into plaintext std output
 @aws kms decrypt --ciphertext-blob fileb://`pwd`/${SECRET_BINARY} --query Plaintext --output text | base64 --decode