RestoreDatabaseEncryptionConfig

import type { RestoreDatabaseEncryptionConfig } from "https://googleapis.deno.dev/v1/spanner:v1.ts";

Encryption configuration for the restored database.

interface RestoreDatabaseEncryptionConfig {

encryptionType?:

| "ENCRYPTION_TYPE_UNSPECIFIED"

| "USE_CONFIG_DEFAULT_OR_BACKUP_ENCRYPTION"

| "GOOGLE_DEFAULT_ENCRYPTION"

| "CUSTOMER_MANAGED_ENCRYPTION";

kmsKeyName?: string;

kmsKeyNames?: string[];

}

§Properties

encryptionType?: "ENCRYPTION_TYPE_UNSPECIFIED" | "USE_CONFIG_DEFAULT_OR_BACKUP_ENCRYPTION" | "GOOGLE_DEFAULT_ENCRYPTION" | "CUSTOMER_MANAGED_ENCRYPTION"

[src]

Required. The encryption type of the restored database.

kmsKeyName?: string

[src]

Optional. The Cloud KMS key that will be used to encrypt/decrypt the restored database. This field should be set only when encryption_type is CUSTOMER_MANAGED_ENCRYPTION. Values are of the form projects//locations//keyRings//cryptoKeys/.

kmsKeyNames?: string[]

[src]

Optional. Specifies the KMS configuration for one or more keys used to encrypt the database. Values have the form projects//locations//keyRings//cryptoKeys/. The keys referenced by kms_key_names must fully cover all regions of the database's instance configuration. Some examples: * For regional (single-region) instance configurations, specify a regional location KMS key. * For multi-region instance configurations of type GOOGLE_MANAGED, either specify a multi-region location KMS key or multiple regional location KMS keys that cover all regions in the instance configuration. * For an instance configuration of type USER_MANAGED, specify only regional location KMS keys to cover each region in the instance configuration. Multi-region location KMS keys aren't supported for USER_MANAGED type instance configurations.