aws-kms-crypt

Utility for encrypting and decrypting secrets with the AWS KMS service

Classifiers

Development Status: 4 - Beta
Intended Audience: Developers
License: OSI Approved :: MIT License
Programming Language: Python :: 2; Python :: 2.7; Python :: 3; Python :: 3.5
Topic: Security :: Cryptography

Project description

Utility for encrypting and decrypting secrets with the AWS KMS service.

Installation

pip install aws-kms-crypt

Usage

You will need to configure credentials and AWS region for boto3 to use this library. Please refer to the Boto3 Documentation for details.

import kmscrypt

# Encrypting Data
>>> result = kmscrypt.encrypt('secretp4ssw0rd!', key_id='alias/common', encryption_context={
...     'purpose': 'automation'
... })
>>> result
{
    "EncryptedDataKey": "AQIDAHhyrbU/fPcQ+a8pJiYC<snip>",
    "Iv": "689806fe9d571afeffa4c7c24247c766",
    "EncryptedData": "YRjZDQ2KzcEAZqUy7SpWWA==",
    "EncryptionContext": {
        "purpose": "automation"
    }
}

# Decrypting data
>>> kmscrypt.decrypt(result)
'secretp4ssw0rd!'