#!/bin/bash

# Basic example invocation of the AWS Encryption CLI to encrypt a file
# See full docs for more details:
#  https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/crypto-cli-examples.html

# Usage: encrypt_file.sh $INPUT_FILE $CMK_ARN $OUTPUT_DIRECTORY

aws-encryption-cli --encrypt \
                   --input $1 \
                   --wrapping-keys key=$2 \
                   --suppress-metadata \
                   --encryption-context purpose=test \
                   --commitment-policy require-encrypt-require-decrypt \
                   --output $3