GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2CryptoKey (google_api_dlp v0.44.0) View Source
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.
Attributes
-
kmsWrapped
(type:GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2KmsWrappedCryptoKey.t
, default:nil
) - Key wrapped using Cloud KMS -
transient
(type:GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TransientCryptoKey.t
, default:nil
) - Transient crypto key -
unwrapped
(type:GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2UnwrappedCryptoKey.t
, default:nil
) - Unwrapped crypto key
Link to this section Summary
Functions
Unwrap a decoded JSON object into its complex fields.
Link to this section Types
Specs
t() :: %GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2CryptoKey{ kmsWrapped: GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2KmsWrappedCryptoKey.t() | nil, transient: GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TransientCryptoKey.t() | nil, unwrapped: GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2UnwrappedCryptoKey.t() | nil }
Link to this section Functions
Specs
Unwrap a decoded JSON object into its complex fields.