Encryption information for a Cloud Spanner database or backup.
| JSON representation |
|---|
{ "encryptionType": enum ( |
| Fields | |
|---|---|
encryptionType |
Output only. The type of encryption. |
encryptionStatus |
Output only. If present, the status of a recent encrypt/decrypt call on underlying data for this database or backup. Regardless of status, data is always encrypted at rest. |
kmsKeyVersion |
Output only. A Cloud KMS key version that is being used to protect the database or backup. |
Type
Possible encryption types.
| Enums | |
|---|---|
TYPE_UNSPECIFIED |
Encryption type was not specified, though data at rest remains encrypted. |
GOOGLE_DEFAULT_ENCRYPTION |
The data is encrypted at rest with a key that is fully managed by Google. No key version or status will be populated. This is the default state. |
CUSTOMER_MANAGED_ENCRYPTION |
The data is encrypted at rest with a key that is managed by the customer. The active version of the key. kmsKeyVersion will be populated, and encryptionStatus may be populated. |