code: def _api_decrypt():
      '''
      Return the response dictionary from the KMS decrypt API call.
      '''
      kms = _kms()
      data_key = _cfg_data_key()
      try:
          return kms.decrypt(CiphertextBlob=data_key)
      except botocore.exceptions.ClientError as orig_exc:
          error_code = orig_exc.response.get('Error', {}).get('Code', '')
          if error_code != 'InvalidCiphertextException':
              raise
          err_msg = 'aws_kms:data_key is not a valid KMS data key'
          config_error = salt.exceptions.SaltConfigurationError(err_msg)
          six.raise_from(config_error, orig_excf _api_decrypt():
      '''
      Return the response dictionary from the KMS decrypt API call.
      '''
      kms = _kms()
      data_key = _cfg_data_key()
      try:
          return kms.decrypt(CiphertextBlob=data_key)
      except botocore.exceptions.ClientError as orig_exc:
          error_code = orig_exc.response.get('Error', {}).get('Code', '')
          if error_code != 'InvalidCiphertextException':
              raise
          err_msg = 'aws_kms:data_key is not a valid KMS data key'
          config_error = salt.exceptions.SaltConfigurationError(err_msg)
          six.raise_from(config_error, orig_exc)
docs: Return the response dictionary from the KMS decrypt API call.