This is a data encryption key (DEK) (as opposed to
a key encryption key (KEK) stored by Cloud Key Management
Service (Cloud KMS).
When using Cloud KMS to wrap or unwrap a DEK, be sure to set an
appropriate IAM policy on the KEK to ensure an attacker cannot
unwrap the DEK.
This message hasoneof_ fields (mutually exclusive fields).
For each oneof, at most one member field can be set at the same time.
Setting any member of the oneof automatically clears all other
members.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Class CryptoKey (3.31.0)\n\nVersion latestkeyboard_arrow_down\n\n- [3.31.0 (latest)](/python/docs/reference/dlp/latest/google.cloud.dlp_v2.types.CryptoKey)\n- [3.30.0](/python/docs/reference/dlp/3.30.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.29.0](/python/docs/reference/dlp/3.29.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.28.0](/python/docs/reference/dlp/3.28.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.27.0](/python/docs/reference/dlp/3.27.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.26.0](/python/docs/reference/dlp/3.26.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.25.1](/python/docs/reference/dlp/3.25.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.24.0](/python/docs/reference/dlp/3.24.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.23.0](/python/docs/reference/dlp/3.23.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.22.0](/python/docs/reference/dlp/3.22.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.20.0](/python/docs/reference/dlp/3.20.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.19.0](/python/docs/reference/dlp/3.19.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.18.1](/python/docs/reference/dlp/3.18.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.17.0](/python/docs/reference/dlp/3.17.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.16.0](/python/docs/reference/dlp/3.16.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.15.3](/python/docs/reference/dlp/3.15.3/google.cloud.dlp_v2.types.CryptoKey)\n- [3.14.0](/python/docs/reference/dlp/3.14.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.13.0](/python/docs/reference/dlp/3.13.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.12.3](/python/docs/reference/dlp/3.12.3/google.cloud.dlp_v2.types.CryptoKey)\n- [3.11.1](/python/docs/reference/dlp/3.11.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.10.1](/python/docs/reference/dlp/3.10.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.9.2](/python/docs/reference/dlp/3.9.2/google.cloud.dlp_v2.types.CryptoKey)\n- [3.8.1](/python/docs/reference/dlp/3.8.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.7.1](/python/docs/reference/dlp/3.7.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.6.2](/python/docs/reference/dlp/3.6.2/google.cloud.dlp_v2.types.CryptoKey)\n- [3.5.0](/python/docs/reference/dlp/3.5.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.4.0](/python/docs/reference/dlp/3.4.0/google.cloud.dlp_v2.types.CryptoKey)\n- [3.3.1](/python/docs/reference/dlp/3.3.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.2.4](/python/docs/reference/dlp/3.2.4/google.cloud.dlp_v2.types.CryptoKey)\n- [3.1.1](/python/docs/reference/dlp/3.1.1/google.cloud.dlp_v2.types.CryptoKey)\n- [3.0.1](/python/docs/reference/dlp/3.0.1/google.cloud.dlp_v2.types.CryptoKey)\n- [2.0.2](/python/docs/reference/dlp/2.0.2/google.cloud.dlp_v2.types.CryptoKey)\n- [1.0.2](/python/docs/reference/dlp/1.0.2/google.cloud.dlp_v2.types.CryptoKey)\n- [0.15.2](/python/docs/reference/dlp/0.15.2/google.cloud.dlp_v2.types.CryptoKey)\n- [0.14.0](/python/docs/reference/dlp/0.14.0/google.cloud.dlp_v2.types.CryptoKey)\n- [0.13.0](/python/docs/reference/dlp/0.13.0/google.cloud.dlp_v2.types.CryptoKey)\n- [0.12.1](/python/docs/reference/dlp/0.12.1/google.cloud.dlp_v2.types.CryptoKey) \n\n CryptoKey(mapping=None, *, ignore_unknown_fields=False, **kwargs)\n\nThis is a data encryption key (DEK) (as opposed to\na key encryption key (KEK) stored by Cloud Key Management\nService (Cloud KMS).\nWhen using Cloud KMS to wrap or unwrap a DEK, be sure to set an\nappropriate IAM policy on the KEK to ensure an attacker cannot\nunwrap the DEK.\n\nThis message has `oneof`_ fields (mutually exclusive fields).\nFor each oneof, at most one member field can be set at the same time.\nSetting any member of the oneof automatically clears all other\nmembers.\n\n.. _oneof: \u003chttps://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields\u003e"]]
