AWS SSM update encryption key of secret

key_change.sh

#!/usr/bin/env bash

keys=$(aws ssm get-parameters-by-path     --path "/prod" --with-decryption | jq --raw-output '.Parameters[] | {name: .Name, value: .Value} | @base64')
for k in $keys; do
    key="$(echo "$k" | base64 --decode)"
    name=$(echo "$key" | jq --raw-output '.name')
    value=$(echo "$key" | jq --raw-output '.value')
    echo $name 
    aws ssm put-parameter --overwrite --name ${name} --type "SecureString"  --value  "${value}" --key-id "alias/custom/ssm"
done