AWS KMS encryption/decryption

kms.sh

#!/bin/bash

function awskmsencrypt() {
    key="$1"
    text="$2"
    aws kms encrypt --key-id "$key" --plaintext fileb://<(echo "$text") --output text --query CiphertextBlob
}

function awskmsdecrypt() {
    crypt="$1" #base64
    aws kms decrypt --ciphertext-blob fileb://<(echo "$crypt" | base64 -d)  --output text --query Plaintext | base64 -d
}