EncryptionInfo

    • The EncryptionInfo object provides information about the encryption used for ingested data.

    • GcpWrappedKeyInfo is a type of wrapped key information specific to Google Cloud Platform.

    • GcpWrappedKeyInfo includes details such as the key type, Workload Identity pool provider, KMS resource ID, and the base64 encoded encrypted data encryption key.

    • The KeyType enum specifies the algorithm used for encryption, with XCHACHA20_POLY1305 being one of the defined types.

    Encryption information for the data being ingested.

    JSON representation 
     { 
 // Union field wrapped_key 
can be only one of the following: 
 "gcpWrappedKeyInfo" 
 : 
 { 
 object (  GcpWrappedKeyInfo 
 
) 
 } 
 , 
 "awsWrappedKeyInfo" 
 : 
 { 
 object (  AwsWrappedKeyInfo 
 
) 
 } 
 // End of list of possible types for union field wrapped_key 
. 
 }
    Fields
    Union field wrapped_key . The wrapped key used to encrypt the data. wrapped_key can be only one of the following:
    gcpWrappedKeyInfo

    object ( GcpWrappedKeyInfo )

    Google Cloud Platform wrapped key information.

    awsWrappedKeyInfo

    object ( AwsWrappedKeyInfo )

    Amazon Web Services wrapped key information.

    GcpWrappedKeyInfo

    Information about the Google Cloud Platform wrapped key.

    JSON representation 
     { 
 "keyType" 
 : 
 enum (  KeyType 
 
) 
 , 
 "wipProvider" 
 : 
 string 
 , 
 "kekUri" 
 : 
 string 
 , 
 "encryptedDek" 
 : 
 string 
 }
    Fields
    keyType

    enum ( KeyType )

    Required. The type of algorithm used to encrypt the data.
    wipProvider

    string

    Required. The Workload Identity pool provider required to use KEK.
    kekUri

    string

    Required. Google Cloud Platform Cloud Key Management Service resource ID . Should be in the format of projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{key} or gcp-kms://projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{key}

    encryptedDek

    string

    Required. The base64 encoded encrypted data encryption key.

    KeyType

    The type of algorithm used to encrypt the data.

    Enums
    KEY_TYPE_UNSPECIFIED Unspecified key type. Should never be used.
    XCHACHA20_POLY1305 Algorithm XChaCha20-Poly1305

    AwsWrappedKeyInfo

    A data encryption key wrapped by an AWS KMS key.

    JSON representation 
     { 
 "keyType" 
 : 
 enum (  KeyType 
 
) 
 , 
 "roleArn" 
 : 
 string 
 , 
 "kekUri" 
 : 
 string 
 , 
 "encryptedDek" 
 : 
 string 
 }
    Fields
    keyType

    enum ( KeyType )

    Required. The type of algorithm used to encrypt the data.
    roleArn

    string

    Required. The Amazon Resource Name of the IAM Role to assume for KMS decryption access. Should be in the format of arn:{partition}:iam::{accountId}:role/{role_name}

    kekUri

    string

    Required. The URI of the AWS KMS key used to decrypt the DEK. Should be in the format of arn:{partition}:kms:{region}:{accountId}:key/{key_id} or aws-kms://arn:{partition}:kms:{region}:{accountId}:key/{key_id}

    encryptedDek

    string

    Required. The base64 encoded encrypted data encryption key.

    KeyType

    The type of algorithm used to encrypt the data.

    Enums
    KEY_TYPE_UNSPECIFIED Unspecified key type. Should never be used.
    XCHACHA20_POLY1305 Algorithm XChaCha20-Poly1305
    Design a Mobile Site
    View Site in Mobile | Classic
    Share by: