Class: Google::Cloud::Bigtable::Admin::V2::EncryptionInfo

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/bigtable/admin/v2/table.rb

Overview

Encryption information for a given resource. If this resource is protected with customer managed encryption, the in-use Cloud Key Management Service (Cloud KMS) key version is specified along with its status.

Defined Under Namespace

Modules: EncryptionType

Instance Attribute Summary collapse

Instance Attribute Details

#encryption_status ⇒ ::Google::Rpc::Status (readonly)

Returns Output only. The status of encrypt/decrypt calls on underlying data for this resource. Regardless of status, the existing data is always encrypted at rest.

Returns:

  • (::Google::Rpc::Status) —

    Output only. The status of encrypt/decrypt calls on underlying data for this resource. Regardless of status, the existing data is always encrypted at rest.



234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
 
# File 'proto_docs/google/bigtable/admin/v2/table.rb', line 234

class EncryptionInfo
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Possible encryption types for a resource.
  module EncryptionType
    # Encryption type was not specified, though data at rest remains encrypted.
    ENCRYPTION_TYPE_UNSPECIFIED = 0

    # The data backing this resource is encrypted at rest with a key that is
    # fully managed by Google. No key version or status will be populated.
    # This is the default state.
    GOOGLE_DEFAULT_ENCRYPTION = 1

    # The data backing this resource is encrypted at rest with a key that is
    # managed by the customer.
    # The in-use version of the key and its status are populated for
    # CMEK-protected tables.
    # CMEK-protected backups are pinned to the key version that was in use at
    # the time the backup was taken. This key version is populated but its
    # status is not tracked and is reported as `UNKNOWN`.
    CUSTOMER_MANAGED_ENCRYPTION = 2
  end
end

#encryption_type ⇒ ::Google::Cloud::Bigtable::Admin::V2::EncryptionInfo::EncryptionType (readonly)

Returns Output only. The type of encryption used to protect this resource.

Returns:



234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
 
# File 'proto_docs/google/bigtable/admin/v2/table.rb', line 234

class EncryptionInfo
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Possible encryption types for a resource.
  module EncryptionType
    # Encryption type was not specified, though data at rest remains encrypted.
    ENCRYPTION_TYPE_UNSPECIFIED = 0

    # The data backing this resource is encrypted at rest with a key that is
    # fully managed by Google. No key version or status will be populated.
    # This is the default state.
    GOOGLE_DEFAULT_ENCRYPTION = 1

    # The data backing this resource is encrypted at rest with a key that is
    # managed by the customer.
    # The in-use version of the key and its status are populated for
    # CMEK-protected tables.
    # CMEK-protected backups are pinned to the key version that was in use at
    # the time the backup was taken. This key version is populated but its
    # status is not tracked and is reported as `UNKNOWN`.
    CUSTOMER_MANAGED_ENCRYPTION = 2
  end
end

#kms_key_version ⇒ ::String (readonly)

Returns Output only. The version of the Cloud KMS key specified in the parent cluster that is in use for the data underlying this table.

Returns:

  • (::String) —

    Output only. The version of the Cloud KMS key specified in the parent cluster that is in use for the data underlying this table.



234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
 
# File 'proto_docs/google/bigtable/admin/v2/table.rb', line 234

class EncryptionInfo
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Possible encryption types for a resource.
  module EncryptionType
    # Encryption type was not specified, though data at rest remains encrypted.
    ENCRYPTION_TYPE_UNSPECIFIED = 0

    # The data backing this resource is encrypted at rest with a key that is
    # fully managed by Google. No key version or status will be populated.
    # This is the default state.
    GOOGLE_DEFAULT_ENCRYPTION = 1

    # The data backing this resource is encrypted at rest with a key that is
    # managed by the customer.
    # The in-use version of the key and its status are populated for
    # CMEK-protected tables.
    # CMEK-protected backups are pinned to the key version that was in use at
    # the time the backup was taken. This key version is populated but its
    # status is not tracked and is reported as `UNKNOWN`.
    CUSTOMER_MANAGED_ENCRYPTION = 2
  end
end