public sealed class WorkstationConfig.Types.CustomerEncryptionKey : IMessage<WorkstationConfig.Types.CustomerEncryptionKey>, IEquatable<WorkstationConfig.Types.CustomerEncryptionKey>, IDeepCloneable<WorkstationConfig.Types.CustomerEncryptionKey>, IBufferMessage, IMessage
Reference documentation and code samples for the Cloud Workstations v1 API class WorkstationConfig.Types.CustomerEncryptionKey.
A customer-managed encryption key (CMEK) for the Compute Engine resources of the associated workstation configuration. Specify the name of your Cloud KMS encryption key and the default service account. We recommend that you use a separate service account and follow Cloud KMS best practices.
Implements
IMessageWorkstationConfigTypesCustomerEncryptionKey, IEquatableWorkstationConfigTypesCustomerEncryptionKey, IDeepCloneableWorkstationConfigTypesCustomerEncryptionKey, IBufferMessage, IMessageNamespace
Google.Cloud.Workstations.V1Assembly
Google.Cloud.Workstations.V1.dll
Constructors
CustomerEncryptionKey()
public CustomerEncryptionKey()
CustomerEncryptionKey(CustomerEncryptionKey)
public CustomerEncryptionKey(WorkstationConfig.Types.CustomerEncryptionKey other)
Parameter | |
---|---|
Name | Description |
other | WorkstationConfigTypesCustomerEncryptionKey |
Properties
KmsKey
public string KmsKey { get; set; }
Immutable. The name of the Google Cloud KMS encryption key. For example,
"projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME"
.
The key must be in the same region as the workstation configuration.
Property Value | |
---|---|
Type | Description |
string |
KmsKeyServiceAccount
public string KmsKeyServiceAccount { get; set; }
Immutable. The service account to use with the specified
KMS key. We recommend that you use a separate service account
and follow KMS best practices. For more information, see
Separation of
duties and
gcloud kms keys add-iam-policy-binding
--member
.
Property Value | |
---|---|
Type | Description |
string |