handle base64 encode errors

1 files changed, 4 insertions, 1 deletions

diff --git a/aws/kms.go b/aws/kms.go
index d33d23a7..2961351a 100644
--- a/aws/kms.go
+++ b/aws/kms.go
@@ -30,7 +30,10 @@ func (k *KMS) Encrypt(keyID, plaintext string) (string, error) {
 	if err != nil {
 		return "", err
 	}
-	ciphertext, _ := b64.Encode(output.CiphertextBlob)
+	ciphertext, err := b64.Encode(output.CiphertextBlob)
+	if err != nil {
+		return "", err
+	}
 	return ciphertext, nil
 }