ssh from lambda using keys fetched from KMS-SSE backed s3

lambda_ssh.py

from __future__ import print_function

from botocore.client import Config
import boto3
import paramiko

print('Loading function')

s3 = boto3.client('s3', config=Config(signature_version='s3v4'))

def lambda_handler(event, context):
    s3.download_file('cs-test-data', 'id_rsa', '/tmp/id_rsa')
    client = paramiko.SSHClient()
    client.load_system_host_keys()
    client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
    host='ec2-52-192-221-60.ap-northeast-1.compute.amazonaws.com'
    client.connect(host, username='ec2-user', key_filename='/tmp/id_rsa')
    stdin, stdout, stderr = client.exec_command('uptime')
    error = stderr.read()
    output = stdout.read()
    print("err:" + error)
    print("out:" + output)
    return output