geraldstanje/kms_encrypt_decrypt.sh

## kms_encrypt_decrypt.sh
#!/usr/bin/env bash

if [ -z ${KMS_KEY_ID} ]; then
  echo "KMS_KEY_ID unset! Exiting";
  exit 1
fi

aws kms encrypt --key-id $KMS_KEY_ID --plaintext "hello" --output text --query CiphertextBlob > output.kms.yml
encrypted=$(<output.kms.yml)
echo "Encrypted: $encrypted"

echo "Decrypted: $(aws kms decrypt --ciphertext-blob fileb://<(echo $encrypted | base64 -D) --query Plaintext --output text | base64 -D)"
	#!/usr/bin/env bash

	if [ -z ${KMS_KEY_ID} ]; then
	echo "KMS_KEY_ID unset! Exiting";
	exit 1
	fi

	aws kms encrypt --key-id $KMS_KEY_ID --plaintext "hello" --output text --query CiphertextBlob > output.kms.yml
	encrypted=$(<output.kms.yml)
	echo "Encrypted: $encrypted"

	echo "Decrypted: $(aws kms decrypt --ciphertext-blob fileb://<(echo $encrypted \| base64 -D) --query Plaintext --output text \| base64 -D)"