How to decrypt the encrypted S3 file using aws-encryption-cli --decrypt

Question

I am trying to decrypt an encrypted file using aws-encryption-cli --decrypt.

Is there a way I can specify the encrypted S3 object location? I am using role based decryption where the current role has permission to decrypt the object even if i do not specify the KMS key.

I was trying to use below command:

aws-encryption-cli --decrypt --input s3://XXX/encryptedfile.text --encryption-context purpose=test --metadata-output ~/metadata --output

Answer 1

Use command : aws s3 presign s3://mybucket/abc_count.png

you get presign URL for access uploaded file/object

Output : https://mybucket.s3.amazonaws.com/abc_count.png?AWSAccessKeyId=AKIAJXXXXXXXXXXXXXXX&Expires=1503602631&Signature=ibOGfAovnhIF13DALdAgsdtg2s%3D

than you can directly download Encrypted file/object using below command :

wget -P /home/ubuntu/Desktop/abc_count1.png "your presign URL"

Hope it will work.