AWS KMS - two liners
For binary encrypted output: 1 2 aws kms encrypt --region ap-southeast-2 --key-id alias/blah --plaintext fileb://blah --output text --query CiphertextBlob | base64 --decode > blah.enc aws kms decrypt --ciphertext-blob fileb://blah.enc --output text --query Plaintext | base64 --decode For base64 encrypted output: ...