Use the AWS KMS Decrypt operation to decrypt ciphertext. You can optionally include an encryption context and grant tokens.