Easy functions to encrypt and decrypt using Boto3

kms.py

import base64
import boto3


KEY = '12345678-abcd-efgh-ijkl-1234567890'
PROFILE = 'my-security-profile'
session = boto3.session.Session(profile_name=PROFILE)


def encrypt(secret, session=session, alias=KEY):
    client = session.client('kms')
    ciphertext = client.encrypt(KeyId=alias, Plaintext=secret.encode())
    return base64.b64encode(ciphertext['CiphertextBlob']).decode()


def decrypt(secret, session=session):
    client = session.client('kms')
    plaintext = client.decrypt(CiphertextBlob=bytes(base64.b64decode(secret)))
    return plaintext['Plaintext'].decode()