- Create a KMS key, and take note of the Key ID returned:
aws kms create-key --query 'KeyMetadata.KeyId' --output text
- Create an alias for the key:
Unicreds uses the alias/credstash alias to make it compatible with Credstash.
aws kms create-alias --alias-name 'alias/credstash'
--target-key-id "<your-key-id>"
- Set up the resources required by Unicreds:
unicreds setup
- Store a secret using the put command:
unicreds put foo bar
- Get the secret using the get command:
unicreds get foo