https://keroseneheaterreview.blogspot.com/2024/02/how-to-decrypt-aws-ruby-client-side.html