How to do it...

1. Create a KMS key, and take note of the Key ID returned:

        aws kms create-key --query 'KeyMetadata.KeyId' --output text

2. Create an alias for the key:

Unicreds uses the alias/credstash alias to make it compatible with Credstash.

        aws kms create-alias --alias-name 'alias/credstash' \
        --target-key-id "<your-key-id>"

3. Set up the resources required by Unicreds:

        unicreds setup

4. Store a secret using the put command:

        unicreds put foo bar

5. Get the secret using the get command:

        unicreds get foo