simple kms cli

kms.sh

#!/bin/bash

PROFILE=""
if [ -z "$AWS_PROFILE" ]; then
    PROFILE="--profile $AWS_PROFILE"
fi

case $1 in
    encrypt)
        aws kms encrypt ${PROFILE} --key-id $2 --plaintext $3 --output text --query CiphertextBlob
        ;;
    decrypt)
        aws kms decrypt ${PROFILE} --ciphertext-blob fileb://<(echo $2 | base64 -D) --output text --query Plaintext | base64 -D
        ;;
    decrypt-raw)
        aws kms decrypt ${PROFILE} --ciphertext-blob fileb://<(echo $2 | base64 -D)
        ;;
    *)
        echo $"Usage: $0 {encrypt|decrypt}"
        exit 1
esac