CmdID

CmdID / aws / aws kms

aws kms decrypt

Decrypts ciphertext that was encrypted by a KMS key using any of the following operations: Encrypt GenerateDataKey GenerateDataKeyPair GenerateDataKeyWithoutPlaintext GenerateDataKeyPairWithoutPlaintext You can use this operation to decrypt ciphertext that was encrypted under a symmetric encryption KMS key or an asymmetric encryption KMS key. AWS CLI reference

8 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

8 in the AWS CLI reference
--ciphertext-blobCiphertext to be decrypted.
--dry-run-modifiersSpecifies the modifiers to apply to the dry run operation.
--dry-runChecks if your request will succeed.
--encryption-algorithmSpecifies the encryption algorithm that will be used to decrypt the ciphertext.
--encryption-contextSpecifies the encryption context to use when decrypting the data.
--grant-tokensA list of grant tokens.
--key-idSpecifies the KMS key that KMS uses to decrypt the ciphertext.
--recipientA signed attestation document from an Amazon Web Services Nitro enclave or NitroTPM, and the encryption algorithm to use with the public key in the attestation document.