Class: Google::Privacy::Dlp::V2::CryptoKey
- Inherits:
-
Object
- Object
- Google::Privacy::Dlp::V2::CryptoKey
- Defined in:
- lib/google/cloud/dlp/v2/doc/google/privacy/dlp/v2/dlp.rb
Overview
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key.
Instance Attribute Summary collapse
- #kms_wrapped ⇒ Google::Privacy::Dlp::V2::KmsWrappedCryptoKey
- #transient ⇒ Google::Privacy::Dlp::V2::TransientCryptoKey
- #unwrapped ⇒ Google::Privacy::Dlp::V2::UnwrappedCryptoKey
Instance Attribute Details
#kms_wrapped ⇒ Google::Privacy::Dlp::V2::KmsWrappedCryptoKey
1251 |
# File 'lib/google/cloud/dlp/v2/doc/google/privacy/dlp/v2/dlp.rb', line 1251 class CryptoKey; end |
#transient ⇒ Google::Privacy::Dlp::V2::TransientCryptoKey
1251 |
# File 'lib/google/cloud/dlp/v2/doc/google/privacy/dlp/v2/dlp.rb', line 1251 class CryptoKey; end |
#unwrapped ⇒ Google::Privacy::Dlp::V2::UnwrappedCryptoKey
1251 |
# File 'lib/google/cloud/dlp/v2/doc/google/privacy/dlp/v2/dlp.rb', line 1251 class CryptoKey; end |