EncryptionInfo

  • The EncryptionInfo object provides information about the encryption used for ingested data.

  • GcpWrappedKeyInfo is a type of wrapped key information specific to Google Cloud Platform.

  • GcpWrappedKeyInfo includes details such as the key type, Workload Identity pool provider, KMS resource ID, and the base64 encoded encrypted data encryption key.

  • The KeyType enum specifies the algorithm used for encryption, with XCHACHA20_POLY1305 being one of the defined types.

Encryption information for the data being ingested.

JSON representation 
{

  // Union field wrapped_key can be only one of the following:
  "gcpWrappedKeyInfo": {
    object (GcpWrappedKeyInfo)
  }
  // End of list of possible types for union field wrapped_key.
}
Fields
Union field wrapped_key. The wrapped key used to encrypt the data. wrapped_key can be only one of the following:
gcpWrappedKeyInfo

object (GcpWrappedKeyInfo)

Google Cloud Platform wrapped key information.

GcpWrappedKeyInfo

Information about the Google Cloud Platform wrapped key.

JSON representation 
{
  "keyType": enum (KeyType),
  "wipProvider": string,
  "kekUri": string,
  "encryptedDek": string
}
Fields
keyType

enum (KeyType)

Required. The type of algorithm used to encrypt the data.
wipProvider

string

Required. The Workload Identity pool provider required to use KEK.
kekUri

string

Required. Google Cloud Platform Cloud Key Management Service resource ID. Should be in the format of "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{key}".
encryptedDek

string

Required. The base64 encoded encrypted data encryption key.

KeyType

The type of algorithm used to encrypt the data.

Enums
KEY_TYPE_UNSPECIFIED Unspecified key type. Should never be used.
XCHACHA20_POLY1305 Algorithm XChaCha20-Poly1305