AWS Key Management Serviceのencrypt、decrypt実装サンプル

AWSKMSSample.java

private String encrypt(){
    String keyId = "arn:aws:kms:...";
    ByteBuffer plaintext = ByteBuffer.wrap("plainText".getBytes());
    EncryptRequest req = new EncryptRequest()
      .withKeyId(keyId)
      .withPlaintext(plaintext);
    ByteBuffer ciphertext = AWSKMSClient.encrypt(req).getCiphertextBlob();
    return Base64.getEncoder().encodeToString(ciphertext.array());
}

private String decrypt(){
    DecryptRequest req = new DecryptRequest()
      .withCiphertextBlob(ByteBuffer.wrap(Base64.getDecoder()
                                          .decode("cipherText".getBytes())));
    ByteBuffer plaintext = AWSKMSClient.decrypt(req).getPlaintext();
    return new String(plaintext.array());
}