GooglePrivacyDlpV2CryptoKey
import type { GooglePrivacyDlpV2CryptoKey } from "https://googleapis.deno.dev/v1/dlp:v2.ts";
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK.
interface GooglePrivacyDlpV2CryptoKey {
kmsWrapped?: GooglePrivacyDlpV2KmsWrappedCryptoKey;
transient?: GooglePrivacyDlpV2TransientCryptoKey;
unwrapped?: GooglePrivacyDlpV2UnwrappedCryptoKey;
}§Properties
§
kmsWrapped?: GooglePrivacyDlpV2KmsWrappedCryptoKey
[src]Key wrapped using Cloud KMS
§
transient?: GooglePrivacyDlpV2TransientCryptoKey
[src]Transient crypto key
§
unwrapped?: GooglePrivacyDlpV2UnwrappedCryptoKey
[src]Unwrapped crypto key