Build a value transform that decrypts AWS KMS ciphertext.
Pass it as the manager's transform: any string value prefixed with kms: (configurable) is
treated as base64 ciphertext and replaced with its decrypted plaintext; everything else passes
through untouched. @aws-sdk/client-kms is imported lazily as an optional peer dependency.
Build a value transform that decrypts AWS KMS ciphertext.
Pass it as the manager's
transform: any string value prefixed withkms:(configurable) is treated as base64 ciphertext and replaced with its decrypted plaintext; everything else passes through untouched.@aws-sdk/client-kmsis imported lazily as an optional peer dependency.