Source: https://viblo.asia/p/envelope-encryption-with-aws-kms-Eb85oOg052G

Rails cmk AWS KMS Envelope Encryption