AWS LambdaのKMS復号化をローカル環境で行うサンプル

KmsTest2.py

import boto3
from base64 import b64encode, b64decode

AWS_KEY = 'ここにアクセスキーID'
AWS_SECRET = 'ここにシークレットアクセスキー'
AWS_LAMBDA_FUNCTION_NAME = 'ここにlambda関数名'

ENCRYPTED = 'lambda環境変数の暗号化済みの値'

kms = boto3.client(
    'kms',
    region_name = 'ap-northeast-1',
    aws_access_key_id = AWS_KEY,
    aws_secret_access_key = AWS_SECRET,
)

DECRYPTED = kms.decrypt(
    CiphertextBlob=b64decode(ENCRYPTED),
    EncryptionContext={'LambdaFunctionName': AWS_LAMBDA_FUNCTION_NAME}
)['Plaintext'].decode('utf-8')
print('DECRYPTED : {}'.format(DECRYPTED))