google_api_dlp v0.9.0 GoogleApi.DLP.V2.Model.GooglePrivacyDlpV2CryptoKey View Source

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key.

Attributes

  • kmsWrapped (GooglePrivacyDlpV2KmsWrappedCryptoKey): Defaults to: null.
  • transient (GooglePrivacyDlpV2TransientCryptoKey): Defaults to: null.
  • unwrapped (GooglePrivacyDlpV2UnwrappedCryptoKey): Defaults to: null.

Link to this section Summary

Functions

Unwrap a decoded JSON object into its complex fields.

Link to this section Types

Link to this section Functions

Link to this function

decode(value, options) View Source
decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.