This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#kms_wrapped
def kms_wrapped() -> ::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey
Returns
- (::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey) — Key wrapped using Cloud KMS
#kms_wrapped=
def kms_wrapped=(value) -> ::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey
Parameter
- value (::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey) — Key wrapped using Cloud KMS
Returns
- (::Google::Cloud::Dlp::V2::KmsWrappedCryptoKey) — Key wrapped using Cloud KMS
#transient
def transient() -> ::Google::Cloud::Dlp::V2::TransientCryptoKey
Returns
- (::Google::Cloud::Dlp::V2::TransientCryptoKey) — Transient crypto key
#transient=
def transient=(value) -> ::Google::Cloud::Dlp::V2::TransientCryptoKey
Parameter
- value (::Google::Cloud::Dlp::V2::TransientCryptoKey) — Transient crypto key
Returns
- (::Google::Cloud::Dlp::V2::TransientCryptoKey) — Transient crypto key
#unwrapped
def unwrapped() -> ::Google::Cloud::Dlp::V2::UnwrappedCryptoKey
Returns
- (::Google::Cloud::Dlp::V2::UnwrappedCryptoKey) — Unwrapped crypto key
#unwrapped=
def unwrapped=(value) -> ::Google::Cloud::Dlp::V2::UnwrappedCryptoKey
Parameter
- value (::Google::Cloud::Dlp::V2::UnwrappedCryptoKey) — Unwrapped crypto key
Returns
- (::Google::Cloud::Dlp::V2::UnwrappedCryptoKey) — Unwrapped crypto key