Encryption information for a Cloud Spanner database or backup.
JSON representation |
---|
{ "encryptionType" : enum ( |
Fields | |
---|---|
encryptionType
|
Output only. The type of encryption. |
encryptionStatus
|
Output only. If present, the status of a recent encrypt/decrypt call on underlying data for this database or backup. Regardless of status, data is always encrypted at rest. |
kmsKeyVersion
|
Output only. A Cloud KMS key version that is being used to protect the database or backup. |
Type
Possible encryption types.
Enums | |
---|---|
TYPE_UNSPECIFIED
|
Encryption type was not specified, though data at rest remains encrypted. |
GOOGLE_DEFAULT_ENCRYPTION
|
The data is encrypted at rest with a key that is fully managed by Google. No key version or status will be populated. This is the default state. |
CUSTOMER_MANAGED_ENCRYPTION
|
The data is encrypted at rest with a key that is managed by the customer. The active version of the key. kmsKeyVersion
will be populated, and encryptionStatus
may be populated. |