CryptoKey(mapping=None, *, ignore_unknown_fields=False, **kwargs)This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key.
This message has oneof_ fields (mutually exclusive fields).
For each oneof, at most one member field can be set at the same time.
Setting any member of the oneof automatically clears all other
members.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
Attributes | |
|---|---|
| Name | Description |
transient |
google.cloud.dlp_v2.types.TransientCryptoKey
Transient crypto key This field is a member of oneof_ source.
|
unwrapped |
google.cloud.dlp_v2.types.UnwrappedCryptoKey
Unwrapped crypto key This field is a member of oneof_ source.
|
kms_wrapped |
google.cloud.dlp_v2.types.KmsWrappedCryptoKey
Kms wrapped key This field is a member of oneof_ source.
|