Class KmsWrappedCryptoKey (3.20.0)

KmsWrappedCryptoKey(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Include to use an existing data crypto key wrapped by KMS. The wrapped key must be a 128-, 192-, or 256-bit key. Authorization requires the following IAM permissions when sending a request to perform a crypto transformation using a KMS-wrapped crypto key: dlp.kms.encrypt

For more information, see Creating a wrapped key.

Note: When you use Cloud KMS for cryptographic operations, charges apply <https://cloud.google.com/kms/pricing>__.

Attributes

Name Description
wrapped_key bytes
Required. The wrapped data crypto key.
crypto_key_name str
Required. The resource name of the KMS CryptoKey to use for unwrapping.