Revert "Revert "Root encrypted data to kms encryption""

backend/src/services/secret/secret-queue.ts

@@ -1488,7 +1488,18 @@ export const secretQueueFactory = ({
   });
 
   queueService.start(QueueName.SecretWebhook, async (job) => {
-    await fnTriggerWebhook({ ...job.data, projectEnvDAL, webhookDAL, projectDAL });
+    const { decryptor: secretManagerDecryptor } = await kmsService.createCipherPairWithDataKey({
+      type: KmsDataKey.SecretManager,
+      projectId: job.data.projectId
+    });
+
+    await fnTriggerWebhook({
+      ...job.data,
+      projectEnvDAL,
+      webhookDAL,
+      projectDAL,
+      secretManagerDecryptor: (value) => secretManagerDecryptor({ cipherTextBlob: value }).toString()
+    });
   });
 
   return {