GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2CryptoKey (google_api_dlp v0.43.0) View Source

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.

Attributes

kmsWrapped (type: GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2KmsWrappedCryptoKey.t, default: nil) - Key wrapped using Cloud KMS
transient (type: GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TransientCryptoKey.t, default: nil) - Transient crypto key
unwrapped (type: GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2UnwrappedCryptoKey.t, default: nil) - Unwrapped crypto key

Link to this section Summary

Types

t()

Functions

decode(value, options)

Unwrap a decoded JSON object into its complex fields.

Link to this section Types

t()

Specs

t() :: %GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2CryptoKey{
  kmsWrapped:
    GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2KmsWrappedCryptoKey.t() | nil,
  transient:
    GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2TransientCryptoKey.t() | nil,
  unwrapped:
    GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2UnwrappedCryptoKey.t() | nil
}

Link to this section Functions

decode(value, options)

Specs

decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.