golang-decrypt-using-kms

golang-decrypt-using-kms.go

func decryptSecretFile(secretFile string) (string, error) {

  secretBytes, err := ioutil.ReadFile(secretFile)
  if err != nil {
    return "", err
  }

  kmsClient := kms.New(session.New(&aws.Config{
    Region: aws.String("us-east-1"),
  }))

  params := &kms.DecryptInput{
    CiphertextBlob: secretBytes,
  }

  resp, err := kmsClient.Decrypt(params)
  if err != nil {
    return "", err
  }

  err = os.Remove(secretFile)
  if err != nil {
    return "", err
  }

  return string(resp.Plaintext), nil
}