Skip to content

AWS Decrypt

Category: Security

Description: This extension module allows decrypting text using AWS services. It uses AWS KMS to manage decryption keys and perform encryption securely.

Functionality: Use this extension module to securely decrypt a given text.

Implementation

Name: Input field of type String that identifies the extension module in the flow.

The expression that contains the text to be decrypted: Input field of type String Expression that allows entering the message to be decrypted or a previously created entity containing the encrypted message.

Entity where the decrypted result will be deposited: Input field that allows selecting from a dropdown list the name of the entity where the decrypted text will be stored.

AWS Decryption Key: Input field of type password to enter the Customer Master Key (CMK) used to encrypt and decrypt data. This means that the same key used to encrypt the message must be used to decrypt it.

AWS Access Key: Input field of type password to enter the unique identifier (Access Key ID) used to authenticate requests for access to AWS services. Along with the secret access key, it is part of the credentials that allow making programmatic requests to AWS services.

AWS Secret Access Key: Input field of type password to enter the secret key associated with the Access Key ID.

AWS Region: Input field of type string that allows entering the region obtained from Amazon Web Services (AWS).

The intent to execute on error. The action flow will be interrupted and the description of the error will be passed to the selected intent with the name: 'Aws_Decrypt_Error': Input field that allows selecting from a dropdown list the intent that will be used to handle errors for this extension module (after configuring the intent). The error details will be available in the entity called 'Aws_Decrypt_Error'.

Implementation Example

Field Value
Name AWSDecryptAction
The expression that contains the text to be decrypted toBeDecryptEntity
Entity where the decrypted result will be deposited  decryptedEntity
AWS Encryption Key xxxxxxxxxx
AWS Access Key xxxxxxxxxx
AWS Secret Access Key xxxxxxxxxx
AWS Region us-east-1
The intent to execute on error. The action flow will be interrupted and the description of the error will be passed to the selected intent with the name: 'Aws_Decrypt_Error ErrorHandler_Intent