golang-encrypt-using-kms

golang-encrypt-using-kms.go

func encryptSecret(name string, value string) (string, error) {

  kmsKeyARN := "arn:aws:kms:us-east-1:012345678910:key/0000000-0000-0000-0000-000000000000"
  kmsClient := kms.New(session.New(&aws.Config{
    Region: aws.String("us-east-1"),
  }))

  params := &kms.EncryptInput{
    KeyId:     aws.String(kmsKeyARN),
    Plaintext: []byte(value),
  }

  resp, err := kmsClient.Encrypt(params)
  if err != nil {
    return "", err
  }

  err = ioutil.WriteFile(name, resp.CiphertextBlob, 0644)
  if err != nil {
    return "", err
  }

  return name, nil
}