AWS
Encrypt:
aws kms encrypt --region="eu-west-1" --key-id xxx --plaintext file://secrets.json --output text --query CiphertextBlob | base64 --decode > secrets.encrypted.json
Decrypt:
aws kms decrypt --region="eu-west-1" --ciphertext-blob fileb://secrets.encrypted --output text --query Plaintext | base64 --decode > secrets.decrypted
title: AWS - S3
category: Cloud
S3
aws s3 cp s3://xxx/secrets.tar.gz .
tar zxvf secrets.tar.gz