docstr: AwsApiClient - AwsKms - encrypt/decrypt - Encrypt and push creds, then pull them down
code: def test_encrypt_decrypt():
      """AwsApiClient - AwsKms - encrypt/decrypt - Encrypt and push creds, then pull them down"""
      secret = "shhhhhh".encode()  # nosec
  
      client = boto3.client("kms", region_name=REGION)
      response = client.create_key()
      client.create_alias(
          AliasName=KMS_ALIAS,
          TargetKeyId=response["KeyMetadata"]["KeyId"],
      )
  
      ciphertext = AwsKms.encrypt(
          secret, region=REGION, key_alias=KMS_ALIAS
      )
      response = AwsKms.decrypt(ciphertext, region=REGION)
  
      assert_equal(response, secret)
  
file_path: streamalert/tests/unit/streamalert/shared/test_aws_api_client.py
imports: import boto3
  from botocore.exceptions import ClientError
  from mock import patch
  from moto import mock_kms
  from nose.tools import assert_equal, raises
  from streamalert.shared.helpers.aws_api_client import AwsKms
  from tests.unit.streamalert.alert_processor import KMS_ALIAS, REGION
label_desc: Use image node_id 1 for calling the TestAwsKms obj's underlying member method code with example usage: obj.test_encrypt_decrypt() without return types