public sealed class CustomerManagedEncryption : IMessage<CustomerManagedEncryption>, IEquatable<CustomerManagedEncryption>, IDeepCloneable<CustomerManagedEncryption>, IBufferMessage, IMessage
Reference documentation and code samples for the Secret Manager v1 API class CustomerManagedEncryption.
Configuration for encrypting secret payloads using customer-managed encryption keys (CMEK).
Implements
IMessageCustomerManagedEncryption, IEquatableCustomerManagedEncryption, IDeepCloneableCustomerManagedEncryption, IBufferMessage, IMessageNamespace
Google.Cloud.SecretManager.V1Assembly
Google.Cloud.SecretManager.V1.dll
Constructors
CustomerManagedEncryption()
public CustomerManagedEncryption()
CustomerManagedEncryption(CustomerManagedEncryption)
public CustomerManagedEncryption(CustomerManagedEncryption other)
Parameter | |
---|---|
Name | Description |
other |
CustomerManagedEncryption |
Properties
KmsKeyName
public string KmsKeyName { get; set; }
Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication policy type, Cloud KMS CryptoKeys must reside in the same location as the [replica location][Secret.UserManaged.Replica.location].
For secrets using the
[Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
replication policy type, Cloud KMS CryptoKeys must reside in global
.
The expected format is projects/*/locations/*/keyRings/*/cryptoKeys/*
.
Property Value | |
---|---|
Type | Description |
string |