Cloud Data Loss Prevention (DLP) V2 API - Class Google::Cloud::Dlp::V2::CryptoKey (v1.12.1)
Stay organized with collections
Save and categorize content based on your preferences.
Reference documentation and code samples for the Cloud Data Loss Prevention (DLP) V2 API class Google::Cloud::Dlp::V2::CryptoKey.
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#kms_wrapped
defkms_wrapped()->::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey-
(::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey) — Key wrapped using Cloud KMS
Note: The following fields are mutually exclusive:
kms_wrapped,transient,unwrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
#kms_wrapped=
defkms_wrapped=(value)->::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey-
value (::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey) — Key wrapped using Cloud KMS
Note: The following fields are mutually exclusive:
kms_wrapped,transient,unwrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
-
(::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey) — Key wrapped using Cloud KMS
Note: The following fields are mutually exclusive:
kms_wrapped,transient,unwrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
#transient
deftransient()->::Google::Cloud::Dlp::V2::TransientCryptoKey-
(::Google::Cloud::Dlp::V2::TransientCryptoKey) — Transient crypto key
Note: The following fields are mutually exclusive:
transient,unwrapped,kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
#transient=
deftransient=(value)->::Google::Cloud::Dlp::V2::TransientCryptoKey-
value (::Google::Cloud::Dlp::V2::TransientCryptoKey) — Transient crypto key
Note: The following fields are mutually exclusive:
transient,unwrapped,kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
-
(::Google::Cloud::Dlp::V2::TransientCryptoKey) — Transient crypto key
Note: The following fields are mutually exclusive:
transient,unwrapped,kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
#unwrapped
defunwrapped()->::Google::Cloud::Dlp::V2::UnwrappedCryptoKey-
(::Google::Cloud::Dlp::V2::UnwrappedCryptoKey) — Unwrapped crypto key
Note: The following fields are mutually exclusive:
unwrapped,transient,kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
#unwrapped=
defunwrapped=(value)->::Google::Cloud::Dlp::V2::UnwrappedCryptoKey-
value (::Google::Cloud::Dlp::V2::UnwrappedCryptoKey) — Unwrapped crypto key
Note: The following fields are mutually exclusive:
unwrapped,transient,kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.
-
(::Google::Cloud::Dlp::V2::UnwrappedCryptoKey) — Unwrapped crypto key
Note: The following fields are mutually exclusive:
unwrapped,transient,kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.