AWS KMS encryption/decryption using Python/Boto3

dec.py

import boto3
import base64

if __name__ == '__main__':
    session = boto3.session.Session()

    kms = session.client('kms')

    encrypted_password = 'AQECAHjgTiiE7TYRGp5Irf8jQ3HzlaQaHGYgsUJDaavnHcFm0gAAAGswaQYJKoZIhvcNAQcGoFwwWgIBADBVBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDDwxVQuG0oVwpkU7nQIBEIAoVGk1/wpserb+GVUOzE7PiL/Nr9fTDFKZfpKpF0ip2ct4B2q0Wn6ZZw=='
    binary_data = base64.b64decode(encrypted_password)
    meta = kms.decrypt(CiphertextBlob=binary_data)
    plaintext = meta[u'Plaintext']
    print(plaintext.decode())

enc.py

import boto3
import base64

if __name__ == '__main__':
    session = boto3.session.Session()

    kms = session.client('kms')

    key_id = 'alias/timesheets'
    stuff = kms.encrypt(KeyId=key_id, Plaintext='S00pers33kr1t')
    binary_encrypted = stuff[u'CiphertextBlob']
    encrypted_password = base64.b64encode(binary_encrypted)
    print(encrypted_password.decode())

requirements.txt

boto3==1.4.8
botocore==1.8.1
docutils==0.14
futures==3.1.1
jmespath==0.9.3
python-dateutil==2.6.1
s3transfer==0.1.11
six==1.11.0

@sithik4git Yes, the encrypted data has the required key encoded within it.

What a great contribution, I just needed this.
It helped me a lot, friend.

YES, thank you

Im trying to decrypt the data using AWS KMS key (encrypted). the above code is not working which gives below error. Can anyone pls help me on this.
" raise error_class(parsed_response, operation_name)
botocore.errorfactory.InvalidCiphertextException: An error occurred (InvalidCiph
ertextException) when calling the Decrypt operation:"

I have table in one database which has column level security applied to it, now I am performing some ETL operation on this table using glue job and writing this new table into another database after running glue job I am getting below error Py4JjavaError:An error occurred while calling 065.getDynamicFrame.java.lang.reflect.Invocation Target Exception

so my question is it is possible to perform ETL operation on column level security if yes than how can I do that plz inform me and give some reference.

Advance Thanks & regards

Great gist!

Thanks 🔥