Reference documentation and code samples for the Data Loss Prevention V2 Client class CryptoKey.
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS).
When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.
Generated from protobuf message google.privacy.dlp.v2.CryptoKey
Namespace
Google \ Cloud \ Dlp \ V2Methods
__construct
Constructor.
Parameters
Name
Description
data
array
Optional. Data for populating the Message object.
↳ transient
↳ unwrapped
↳ kms_wrapped
getTransient
Transient crypto key
hasTransient
setTransient
Transient crypto key
Returns
Type
Description
$this
getUnwrapped
Unwrapped crypto key
hasUnwrapped
setUnwrapped
Unwrapped crypto key
Returns
Type
Description
$this
getKmsWrapped
Key wrapped using Cloud KMS
hasKmsWrapped
setKmsWrapped
Key wrapped using Cloud KMS
Returns
Type
Description
$this
getSource
Returns
Type
Description
string
