Class RestoreDatabaseEncryptionConfig (3.51.0)

RestoreDatabaseEncryptionConfig(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Encryption configuration for the restored database.

Attributes

Name Description
encryption_type google.cloud.spanner_admin_database_v1.types.RestoreDatabaseEncryptionConfig.EncryptionType
Required. The encryption type of the restored database.
kms_key_name str
Optional. The Cloud KMS key that will be used to encrypt/decrypt the restored database. This field should be set only when encryption_type][google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig.encryption_type] is CUSTOMER_MANAGED_ENCRYPTION. Values are of the form projects/.
kms_key_names MutableSequence[str]
Optional. Specifies the KMS configuration for the one or more keys used to encrypt the database. Values are of the form projects/. The keys referenced by kms_key_names must fully cover all regions of the database instance configuration. Some examples: - For single region database instance configs, specify a single regional location KMS key. - For multi-regional database instance configs of type GOOGLE_MANAGED, either specify a multi-regional location KMS key or multiple regional location KMS keys that cover all regions in the instance config. - For a database instance config of type USER_MANAGED, please specify only regional location KMS keys to cover each region in the instance config. Multi-regional location KMS keys are not supported for USER_MANAGED instance configs.

Classes

EncryptionType

EncryptionType(value)

Encryption types for the database to be restored.