Data Loss Prevention V2 Client - Class CryptoKey (2.2.1)

Reference documentation and code samples for the Data Loss Prevention V2 Client class CryptoKey.

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS).

When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.

Generated from protobuf message google.privacy.dlp.v2.CryptoKey

Namespace

Google \ Cloud \ Dlp \ V2

Methods

__construct

Constructor.

Parameters
Name Description
data array

Optional. Data for populating the Message object.

↳ transient TransientCryptoKey

Transient crypto key

↳ unwrapped UnwrappedCryptoKey

Unwrapped crypto key

↳ kms_wrapped KmsWrappedCryptoKey

Key wrapped using Cloud KMS

getTransient

Transient crypto key

Returns
Type Description
TransientCryptoKey|null

hasTransient

setTransient

Transient crypto key

Parameter
Name Description
var TransientCryptoKey
Returns
Type Description
$this

getUnwrapped

Unwrapped crypto key

Returns
Type Description
UnwrappedCryptoKey|null

hasUnwrapped

setUnwrapped

Unwrapped crypto key

Parameter
Name Description
var UnwrappedCryptoKey
Returns
Type Description
$this

getKmsWrapped

Key wrapped using Cloud KMS

Returns
Type Description
KmsWrappedCryptoKey|null

hasKmsWrapped

setKmsWrapped

Key wrapped using Cloud KMS

Parameter
Name Description
var KmsWrappedCryptoKey
Returns
Type Description
$this

getSource

Returns
Type Description
string