Skip to content

Instantly share code, notes, and snippets.

@geraldstanje

geraldstanje/kms_encrypt_decrypt.sh

Created March 9, 2018 02:41
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save geraldstanje/83501d0c5cc730715e58dea5568f1a8f to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save geraldstanje/83501d0c5cc730715e58dea5568f1a8f to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. geraldstanje created this gist Mar 9, 2018.
    12 changes: 12 additions & 0 deletions kms_encrypt_decrypt.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,12 @@
    #!/usr/bin/env bash

    if [ -z ${KMS_KEY_ID} ]; then
    echo "KMS_KEY_ID unset! Exiting";
    exit 1
    fi

    aws kms encrypt --key-id $KMS_KEY_ID --plaintext "hello" --output text --query CiphertextBlob > output.kms.yml
    encrypted=$(<output.kms.yml)
    echo "Encrypted: $encrypted"

    echo "Decrypted: $(aws kms decrypt --ciphertext-blob fileb://<(echo $encrypted | base64 -D) --query Plaintext --output text | base64 -D)"