kms-stream

kms-stream

Encrypt / Decrypt data streams with Amazon's KMS service

example

var fs = require('fs')
  , kms = require('kms-stream')(/* [ aws_config ] */);

// encrypt
var key;
var encryptStream = kms.encrypt('alias/MyKMSKey');
fs
  .createReadStream('./plaintext_secrets.txt')
  .pipe(encryptStream)
  .pipe(fs.createWriteStream('./encrypted_secrets.txt'));

// save encrypted data key
encryptStream.on('key', function(key) {
  key = key;
});

// decrypt
var myEncryptedDataKey = '...';
fs
  .createReadStream('./encrypted_secrets.txt')
  .pipe(kms.decrypt(myEncryptedDataKey))
  .pipe(process.stdout);

install

With npm do:

npm install kms-stream