Google
data class GooglePrivacyDlpV2CryptoKeyArgs(val kmsWrapped: Output<GooglePrivacyDlpV2KmsWrappedCryptoKeyArgs>? = null, val transient: Output<GooglePrivacyDlpV2TransientCryptoKeyArgs>? = null, val unwrapped: Output<GooglePrivacyDlpV2UnwrappedCryptoKeyArgs>? = null) : ConvertibleToJava<GooglePrivacyDlpV2CryptoKeyArgs>
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.
Constructors
Link copied to clipboard
fun GooglePrivacyDlpV2CryptoKeyArgs(kmsWrapped: Output<GooglePrivacyDlpV2KmsWrappedCryptoKeyArgs>? = null, transient: Output<GooglePrivacyDlpV2TransientCryptoKeyArgs>? = null, unwrapped: Output<GooglePrivacyDlpV2UnwrappedCryptoKeyArgs>? = null)