Class: Google::Cloud::Dlp::V2::CryptoKey

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/privacy/dlp/v2/dlp.rb

Overview

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.

Instance Attribute Summary collapse

Instance Attribute Details

#kms_wrapped ⇒ ::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey

Returns Key wrapped using Cloud KMS

Note: The following fields are mutually exclusive: kms_wrapped, transient, unwrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns:

  • (::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey) —

    Key wrapped using Cloud KMS

    Note: The following fields are mutually exclusive: kms_wrapped, transient, unwrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.



2897
2898
2899
2900
 
# File 'proto_docs/google/privacy/dlp/v2/dlp.rb', line 2897

class CryptoKey
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#transient ⇒ ::Google::Cloud::Dlp::V2::TransientCryptoKey

Returns Transient crypto key

Note: The following fields are mutually exclusive: transient, unwrapped, kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns:

  • (::Google::Cloud::Dlp::V2::TransientCryptoKey) —

    Transient crypto key

    Note: The following fields are mutually exclusive: transient, unwrapped, kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.



2897
2898
2899
2900
 
# File 'proto_docs/google/privacy/dlp/v2/dlp.rb', line 2897

class CryptoKey
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#unwrapped ⇒ ::Google::Cloud::Dlp::V2::UnwrappedCryptoKey

Returns Unwrapped crypto key

Note: The following fields are mutually exclusive: unwrapped, transient, kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.

Returns:

  • (::Google::Cloud::Dlp::V2::UnwrappedCryptoKey) —

    Unwrapped crypto key

    Note: The following fields are mutually exclusive: unwrapped, transient, kms_wrapped. If a field in that set is populated, all other fields in the set will automatically be cleared.



2897
2898
2899
2900
 
# File 'proto_docs/google/privacy/dlp/v2/dlp.rb', line 2897

class CryptoKey
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end