RestoreDatabaseEncryptionConfig(
mapping=None, *, ignore_unknown_fields=False, **kwargs
)Encryption configuration for the restored database.
Attributes |
|
|---|---|
| Name | Description |
encryption_type |
google.cloud.spanner_admin_database_v1.types.RestoreDatabaseEncryptionConfig.EncryptionType
Required. The encryption type of the restored database. |
kms_key_name |
str
Optional. The Cloud KMS key that will be used to encrypt/decrypt the restored database. This field should be set only when encryption_type][google.spanner.admin.database.v1.RestoreDatabaseEncryptionConfig.encryption_type]
is CUSTOMER_MANAGED_ENCRYPTION. Values are of the form
projects/.
|
kms_key_names |
MutableSequence[str]
Optional. Specifies the KMS configuration for the one or more keys used to encrypt the database. Values are of the form projects/.
The keys referenced by kms_key_names must fully cover all
regions of the database instance configuration. Some
examples:
- For single region database instance configs, specify a
single regional location KMS key.
- For multi-regional database instance configs of type
GOOGLE_MANAGED, either specify a multi-regional location
KMS key or multiple regional location KMS keys that cover
all regions in the instance config.
- For a database instance config of type USER_MANAGED,
please specify only regional location KMS keys to cover
each region in the instance config. Multi-regional
location KMS keys are not supported for USER_MANAGED
instance configs.
|
Classes
EncryptionType
EncryptionType(value)Encryption types for the database to be restored.