Secret Manager v1 API - Class CustomerManagedEncryption (2.5.0) 

public sealed class CustomerManagedEncryption : IMessage<CustomerManagedEncryption>, IEquatable<CustomerManagedEncryption>, IDeepCloneable<CustomerManagedEncryption>, IBufferMessage, IMessage

Reference documentation and code samples for the Secret Manager v1 API class CustomerManagedEncryption.

Configuration for encrypting secret payloads using customer-managed encryption keys (CMEK).

Inheritance

object > CustomerManagedEncryption

Namespace

Google.Cloud.SecretManager.V1

Assembly

Google.Cloud.SecretManager.V1.dll

Constructors

CustomerManagedEncryption()

public CustomerManagedEncryption()

CustomerManagedEncryption(CustomerManagedEncryption)

public CustomerManagedEncryption(CustomerManagedEncryption other)
Parameter
Name Description
other CustomerManagedEncryption

Properties

KmsKeyName

public string KmsKeyName { get; set; }

Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.

For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication policy type, Cloud KMS CryptoKeys must reside in the same location as the [replica location][Secret.UserManaged.Replica.location].

For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy type, Cloud KMS CryptoKeys must reside in global.

The expected format is projects/*/locations/*/keyRings/*/cryptoKeys/*.

Property Value
Type Description
string