powered by
Encrypt file via KMS
kms_encrypt_file(key, file)
two files created with enc (encrypted data) and
enc
key (encrypted key) extensions
key
the KMS customer master key identifier as a fully specified Amazon Resource Name (eg arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012) or an alias with the alias/ prefix (eg alias/foobar)
arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
alias/
alias/foobar
file path
kms_encrypt kms_decrypt_file
kms_encrypt
kms_decrypt_file