getting_started_encrypt_data.py

import os

from aws_lambda_powertools.utilities.data_masking import DataMasking
from aws_lambda_powertools.utilities.data_masking.provider.kms.aws_encryption_sdk import AwsEncryptionSdkProvider

KMS_KEY_ARN = os.environ["KMS_KEY_ARN"]

def lambda_handler(event, context):

    data = {
        "id": 1,
        "name": "John Doe",
        "age": 30,
        "email": "johndoe@example.com",
        "address": {
            "street": "123 Main St", 
            "city": "Anytown", 
            "state": "CA", 
            "zip": "12345",
        },
    }

    encryption_provider = AwsEncryptionSdkProvider(keys=[KMS_KEY_ARN])
    data_masker = DataMasking(provider=encryption_provider)

    encrypted = data_masker.encrypt(data=data, fields=["email", "address.street"])
    # encrypted = {
    #     "id": 1,
    #     "name": "John Doe",
    #     "age": 30,
    #     "email": "InRoaXMgaXMgYSBzdHJpbmciHsLZGx2na-XzP_TB5Bf2LNU1bLc",
    #     "address": {
    #         "street": "XMgYSB_KDddaDJYMb-JpbmGnagTklwQ-msdaDLP",
    #         "city": "Anytown",
    #         "state": "CA",
    #         "zip": "12345"
    #     },
    # }

    decrypted = data_masker.decrypt(data=encrypted, fields=["email", "address.street"])
    # decrypted = {
    #     "id": 1,
    #     "name": "John Doe",
    #     "age": 30,
    #     "email": "johndoe@example.com",
    #     "address": {
    #         "street": "123 Main St",
    #         "city": "Anytown",
    #         "state": "CA",
    #         "zip": "12345"
    #     },
    # }

    encrypted = data_masker.encrypt(data=data, fields=["email", "address"])
    # encrypted = {
    #     "id": 1,
    #     "name": "John Doe",
    #     "age": 30,
    #     "email": "InRoaXMgaXMgYSBzdHJpbmciHsLZGx2na-XzP_TB5Bf2LNU1bLc",
    #     "address": "XMgYSB_KDddaDJYMb-JpbmGnagTklwQ-msdaDLP"
    # }

    decrypted = data_masker.decrypt(data=encrypted, fields=["email", "address"])
    # decrypted = {
    #     "id": 1,
    #     "name": "John Doe",
    #     "age": 30,
    #     "email": "johndoe@example.com",
    #     "address": {
    #         "street": "123 Main St",
    #         "city": "Anytown",
    #         "state": "CA",
    #         "zip": "12345"
    #     },
    # }

    encrypted = data_masker.encrypt(data=data)
    # encrypted = "InRoaXMgaXMgYSBzdHJpbmciHsLZGx2na-XzP_TB5Bf2LNU1bLc"

    decrypted = data_masker.decrypt(data=encrypted)
    # decrypted = {
    #     "id": 1,
    #     "name": "John Doe",
    #     "age": 30,
    #     "email": "johndoe@example.com",
    #     "address": {
    #         "street": "123 Main St",
    #         "city": "Anytown",
    #         "state": "CA",
    #         "zip": "12345"
    #     },
    # }

    masked = data_masker.mask(data=data, fields=["email", "address.street"])
    # masked = {
    #     "id": 1,
    #     "name": "John Doe",
    #     "age": 30,
    #     "email": "*****",
    #     "address": {
    #         "street": "*****",
    #         "city": "Anytown",
    #         "state": "CA",
    #         "zip": "12345"
    #     },
    # }