Class CustomerManagedEncryption

Configuration for encrypting secret payloads using customer- anaged encryption keys (CMEK).

Attribute
NameDescription
strkms_key_name
Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads. For secrets using the UserManaged replication policy type, Cloud KMS CryptoKeys must reside in the same location as the [replica location][Secret.UserManaged.Replica.location]. For secrets using the Automatic replication policy type, Cloud KMS CryptoKeys must reside in ``global``. The expected format is ``projects/*/locations/*/keyRings/*/cryptoKeys/*``.

Inheritance

builtins.object > proto.message.Message > CustomerManagedEncryption