kms_self_encrypt_demo.py

import base64
import os

import boto3

kms = boto3.client('kms')
key_id = 'alias/kkey'

filename = "./example_b64_encoded_encrypted_file.txt"

kommand = f"aws kms encrypt --key-id {key_id} --plaintext  fileb://{__file__} --query CiphertextBlob  > {filename}"
print(f"{kommand=}", flush=True)
if os.system(kommand) != 0:
    print("something went wrong")
    exit(1)

# open the file in binary mode so that base64 function can turn it to a binary chunk, which    

with open(filename, "rb") as r:
    encoded = r.read()
    bincontent = base64.b64decode(encoded)


decrypt_result = kms.decrypt(CiphertextBlob=bincontent)
print(f"this is the decrypted stuffs:\n {decrypt_result['Plaintext']}")