pub fn encrypt_blob(
state: &SharedKmsState,
account_id: &str,
key_ref: &str,
plaintext: &[u8],
) -> Result<Vec<u8>, KmsApiError>Expand description
Encrypt plaintext under the AES-256 key derived from key_ref
(key id or ARN). Returns an envelope that decrypt_blob accepts
without needing the key-ref passed again.