The Data Manager API is in closed beta. To express interest in joining the closed beta, fill out
this form.
EncryptionInfo
Stay organized with collections
Save and categorize content based on your preferences.
Encryption information for the data being ingested.
| JSON representation |
{
// Union field wrapped_key can be only one of the following:
"gcpWrappedKeyInfo": {
object (GcpWrappedKeyInfo)
}
// End of list of possible types for union field wrapped_key.
} |
| Fields |
Union field wrapped_key. The wrapped key used to encrypt the data. wrapped_key can be only one of the following: |
gcpWrappedKeyInfo |
object (GcpWrappedKeyInfo)
Google Cloud Platform wrapped key information.
|
GcpWrappedKeyInfo
Information about the Google Cloud Platform wrapped key.
| JSON representation |
{
"keyType": enum (KeyType),
"wipProvider": string,
"kekUri": string,
"encryptedDek": string
} |
| Fields |
keyType |
enum (KeyType)
Required. The type of algorithm used to encrypt the data.
|
wipProvider |
string
Required. The Workload Identity pool provider required to use KEK.
|
kekUri |
string
Required. Google Cloud Platform Cloud Key Management Service resource ID.
|
encryptedDek |
string
Required. The base64 encoded encrypted data encryption key.
|
KeyType
The type of algorithm used to encrypt the data.
| Enums |
KEY_TYPE_UNSPECIFIED |
Unspecified key type. Should never be used. |
XCHACHA20_POLY1305 |
Algorithm XChaCha20-Poly1305 |
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-04-10 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-04-10 UTC."],[],[],null,["# EncryptionInfo\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n- [GcpWrappedKeyInfo](#GcpWrappedKeyInfo)\n - [JSON representation](#GcpWrappedKeyInfo.SCHEMA_REPRESENTATION)\n- [KeyType](#KeyType)\n\nEncryption information for the data being ingested.\n\n| JSON representation |\n|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { // Union field `wrapped_key` can be only one of the following: \"gcpWrappedKeyInfo\": { object (/data-manager/api/reference/rest/v1/EncryptionInfo#GcpWrappedKeyInfo) } // End of list of possible types for union field `wrapped_key`. } ``` |\n\n| Fields ||\n|---------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------|\n| Union field `wrapped_key`. The [wrapped key](//cloud.google.com/kms/docs/key-wrapping) used to encrypt the data. `wrapped_key` can be only one of the following: ||\n| `gcpWrappedKeyInfo` | `object (`[GcpWrappedKeyInfo](/data-manager/api/reference/rest/v1/EncryptionInfo#GcpWrappedKeyInfo)`)` Google Cloud Platform wrapped key information. |\n\nGcpWrappedKeyInfo\n-----------------\n\nInformation about the Google Cloud Platform wrapped key.\n\n| JSON representation |\n|-----------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"keyType\": enum (/data-manager/api/reference/rest/v1/EncryptionInfo#KeyType), \"wipProvider\": string, \"kekUri\": string, \"encryptedDek\": string } ``` |\n\n| Fields ||\n|----------------|--------------------------------------------------------------------------------------------------------------------------------------------|\n| `keyType` | `enum (`[KeyType](/data-manager/api/reference/rest/v1/EncryptionInfo#KeyType)`)` Required. The type of algorithm used to encrypt the data. |\n| `wipProvider` | `string` Required. The [Workload Identity](//cloud.google.com/iam/docs/workload-identity-federation) pool provider required to use KEK. |\n| `kekUri` | `string` Required. Google Cloud Platform [Cloud Key Management Service resource ID](//cloud.google.com/kms/docs/getting-resource-ids). |\n| `encryptedDek` | `string` Required. The base64 encoded encrypted data encryption key. |\n\nKeyType\n-------\n\nThe type of algorithm used to encrypt the data.\n\n| Enums ||\n|------------------------|---------------------------------------------|\n| `KEY_TYPE_UNSPECIFIED` | Unspecified key type. Should never be used. |\n| `XCHACHA20_POLY1305` | Algorithm XChaCha20-Poly1305 |"]]