Class CryptoKey (2.0.2)

CryptoKey(mapping=None, *, ignore_unknown_fields=False, **kwargs)

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key.

Attributes
Name	Description
`transient`	`.dlp.TransientCryptoKey` Transient crypto key
`unwrapped`	`.dlp.UnwrappedCryptoKey` Unwrapped crypto key
`kms_wrapped`	`.dlp.KmsWrappedCryptoKey` Kms wrapped key

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2024-11-06 UTC.

Class CryptoKey (2.0.2)

Attributes