DiskSourceImageEncryptionKey class
Properties
-
hashCode
→ int
-
The hash code for this object.
no setterinherited
-
kmsKeySelfLink
→ Input<String?>?
-
The self link of the encryption key used to encrypt the disk. Also called KmsKeyName
in the cloud console. Your project's Compute Engine System service account
(
service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have
roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature.
See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
final
-
kmsKeyServiceAccount
→ Input<String?>?
-
The service account used for the encryption request for the given KMS key.
If absent, the Compute Engine Service Agent service account is used.
final
-
rawKey
→ Input<String?>?
-
Specifies a 256-bit customer-supplied encryption key, encoded in
RFC 4648 base64 to either encrypt or decrypt this resource.
Note: This property is sensitive and will not be displayed in the plan.
final
-
runtimeType
→ Type
-
A representation of the runtime type of the object.
no setterinherited
-
sha256
→ Input<String?>?
-
(Output)
The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied
encryption key that protects this resource.
final