Class CryptoKey (2.0.1)

Version 2.0.1

• 3.16.0 (latest)
• 3.15.3
• 3.14.0
• 3.13.0
• 3.12.3
• 3.11.1
• 3.10.1
• 3.9.2
• 3.8.1
• 3.7.1
• 3.6.2
• 3.5.0
• 3.4.0
• 3.3.1
• 3.2.4
• 3.1.1
• 3.0.1
• 2.0.2
• 1.0.2
• 0.15.2
• 0.14.0
• 0.13.0
• 0.12.1

CryptoKey(mapping=None, *, ignore_unknown_fields=False, **kwargs)

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key.

Attributes

Name	Description
transient	`.dlp.TransientCryptoKey` Transient crypto key
unwrapped	`.dlp.UnwrappedCryptoKey` Unwrapped crypto key
kms_wrapped	`.dlp.KmsWrappedCryptoKey` Kms wrapped key

Inheritance

builtins.object > proto.message.Message > CryptoKey