encrypt_decrypt_using_kms.py

gistfile1.txt

import base64
import boto3


REGION_NAME = "us-east-2"

# Decrypt value using AWS KMS Key

kmsclient = boto3.client('kms', region_name=REGION_NAME)
ciphertext = "encryted_value"
binary_data = base64.b64decode(ciphertext)
meta = kmsclient.decrypt(CiphertextBlob=binary_data)
plaintext = meta[u'Plaintext']
print(plaintext.decode())
decrypted_value = kmsclient.decrypt(CiphertextBlob=base64.b64decode(ciphertext))['Plaintext'].decode('utf-8')
print(decrypted_value)

# Encrypt value using AWS KMS Key

decrypted_value = "HelloWorld!"
kmsclient = boto3.client('kms', region_name=REGION_NAME)
key_id = 'arn:aws:kms:<aws_region>:XXXXXXXXXXXXXX:key/demokey'
stuff = kmsclient.encrypt(KeyId=key_id, Plaintext=decrypted_value)
binary_encrypted = stuff[u'CiphertextBlob']
encrypted_password = base64.b64encode(binary_encrypted)
print(encrypted_password.decode())