Resource: EncryptionConfig
A Resource designed to manage encryption configurations for customers to support Customer Managed Encryption Keys (CMEK).
JSON representation |
---|
{ "name" : string , "key" : string , "createTime" : string , "updateTime" : string , "encryptionState" : enum ( |
Fields | |
---|---|
name
|
Identifier. The resource name of the EncryptionConfig. Format: organizations/{organization}/locations/{location}/encryptionConfigs/{encryptionConfig} Global location is not supported. |
key
|
Optional. If a key is chosen, it means that the customer is using CMEK. If a key is not chosen, it means that the customer is using Google managed encryption. |
createTime
|
Output only. The time when the Encryption configuration was created. Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
updateTime
|
Output only. The time when the Encryption configuration was last updated. Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
encryptionState
|
Output only. The state of encryption of the databases. |
etag
|
Etag of the EncryptionConfig. This is a strong etag. |
failureDetails
|
Output only. Details of the failure if anything related to Cmek db fails. |
EncryptionState
State of encryption of the databases when EncryptionConfig is created or updated.
Enums | |
---|---|
ENCRYPTION_STATE_UNSPECIFIED
|
State is not specified. |
ENCRYPTING
|
The encryption state of the database when the EncryptionConfig is created or updated. If the encryption fails, it is retried indefinitely and the state is shown as ENCRYPTING. |
COMPLETED
|
The encryption of data has completed successfully. |
FAILED
|
The encryption of data has failed. The state is set to FAILED when the encryption fails due to reasons like permission issues, invalid key etc. |
FailureDetails
Details of the failure if anything related to Cmek db fails.
JSON representation |
---|
{
"errorCode"
:
enum (
|
Fields | |
---|---|
errorCode
|
Output only. The error code for the failure. |
ErrorCode
Error code for the failure if anything related to Cmek db fails.
Enums | |
---|---|
UNKNOWN
|
The error code is not specified |
INTERNAL_ERROR
|
Error because of internal server error, will be retried automatically. |
REQUIRE_USER_ACTION
|
User action is required to resolve the error. |
Methods |
|
---|---|
|
Create an EncryptionConfig. |
|
Delete an EncryptionConfig. |
|
Get an EncryptionConfig. |
|
List EncryptionConfigs. |
|
Update an EncryptionConfig. |