Class CreateBackupEncryptionConfig (3.46.0)

CreateBackupEncryptionConfig(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Encryption configuration for the backup to create.

Attributes

NameDescription
encryption_type google.cloud.spanner_admin_database_v1.types.CreateBackupEncryptionConfig.EncryptionType
Required. The encryption type of the backup.
kms_key_name str
Optional. The Cloud KMS key that will be used to protect the backup. This field should be set only when encryption_type][google.spanner.admin.database.v1.CreateBackupEncryptionConfig.encryption_type] is CUSTOMER_MANAGED_ENCRYPTION. Values are of the form projects/.

Classes

EncryptionType

EncryptionType(value)

Encryption types for the backup.

Enum values:

ENCRYPTION_TYPE_UNSPECIFIED (0):
    Unspecified. Do not use.
USE_DATABASE_ENCRYPTION (1):
    Use the same encryption configuration as the database. This
    is the default option when
    `encryption_config][google.spanner.admin.database.v1.CreateBackupEncryptionConfig]`
    is empty. For example, if the database is using
    `Customer_Managed_Encryption`, the backup will be using
    the same Cloud KMS key as the database.
GOOGLE_DEFAULT_ENCRYPTION (2):
    Use Google default encryption.
CUSTOMER_MANAGED_ENCRYPTION (3):
    Use customer managed encryption. If specified,
    `kms_key_name` must contain a valid Cloud KMS key.