AWS - Bash - Get a single SSM parameter, (un)encrypted

awsgetparam

#!/bin/bash

#chmod +x /usr/bin/awsgetparam
#Usage: awsgetparam <param-name> <profile name> <EMTPY|Y|y>
#Output: param value

PARAM_NAME="$1"
shift
PROFILE="$1"
shift
UNENCRYPTED="$1"
shift

WITH_DECRYTPION=""
if [[ "${UNENCRYPTED}" =~ ^[yY] ]];
then
    WITH_DECRYPTION="--with-decryption"
fi
aws ssm get-parameter --name "${PARAM_NAME}" "${WITH_DECRYPTION}" --profile "${PROFILE}" | jq -c -r -e ".Parameter.Value"