aws-kms-crypt 0.0.2

Utility for encrypting and decrypting secrets with the AWS KMS service

Utility for encrypting and decrypting secrets with the AWS KMS service.

Installation

pip install aws-kms-crypt

Usage

You will need to configure credentials and AWS region for boto3 to use this library. Please refer to the boto3 configuration for details.

import kmscrypt

# Encrypting Data
>>> result = kmscrypt.encrypt('secretp4ssw0rd!', key_id='alias/common', encryption_context={
...     'purpose': 'automation'
... })
>>> result
{
    "EncryptedDataKey": "AQIDAHhyrbU/fPcQ+a8pJiYC<snip>",
    "Iv": "689806fe9d571afeffa4c7c24247c766",
    "EncryptedData": "YRjZDQ2KzcEAZqUy7SpWWA==",
    "EncryptionContext": {
        "purpose": "automation"
    }
}

# Decrypting data
>>> kmscrypt.decrypt(result)
'secretp4ssw0rd!'