aws kms decrypt \ --ciphertext-blob fileb://<(echo "<ENCRYPTED_STRING_HERE>" | base64 -D) \ --output text \ --query Plaintext \ --region us-east-1 \ --profile <AWS_PROFILE_HERE> | base64 --decode