aws-kms-crypt.sh

gistfile1.txt

# Usage:
#		encrypt kms-key-id plaintext
function encrypt () {
	key_id=$1
	plaintext=$2
	aws kms encrypt --key-id $key_id --plaintext fileb://<(echo $plaintext) --query CiphertextBlob --output text
}

# Usage:
#   decrypt ciphertext
function decrypt () {
	ciphertext=$1
	aws kms decrypt --ciphertext-blob fileb://<(echo $ciphertext | base64 --decode) --output text --query Plaintext | base64 --decode
}