BucketEncryption constructor
- Input<
BucketEncryptionCustomerManagedEncryptionEnforcementConfig?> ? customerManagedEncryptionEnforcementConfig, - Input<
BucketEncryptionCustomerSuppliedEncryptionEnforcementConfig?> ? customerSuppliedEncryptionEnforcementConfig, - Input<
String?> ? defaultKmsKeyName, - Input<
BucketEncryptionGoogleManagedEncryptionEnforcementConfig?> ? googleManagedEncryptionEnforcementConfig,
Creates a new BucketEncryption.
customerManagedEncryptionEnforcementConfig If omitted, then new objects with CMEK encryption-type is allowed. If set, then new objects created in this bucket must comply with enforcement config. Changing this has no effect on existing objects; it applies to new objects only, Structure is documented below documented below.
customerSuppliedEncryptionEnforcementConfig If omitted, then new objects with CSEK encryption-type is allowed. If set, then new objects created in this bucket must comply with enforcement config. Changing this has no effect on existing objects; it applies to new objects only, Structure is documented below documented below.
defaultKmsKeyName The id of a Cloud KMS key that will be used to encrypt objects inserted into this bucket, if no encryption method is specified.
googleManagedEncryptionEnforcementConfig If omitted, then new objects with GMEK encryption-type is allowed. If set, then new objects created in this bucket must comply with enforcement config. Changing this has no effect on existing objects; it applies to new objects only, Structure is documented below documented below.
Implementation
const BucketEncryption({
this.customerManagedEncryptionEnforcementConfig,
this.customerSuppliedEncryptionEnforcementConfig,
this.defaultKmsKeyName,
this.googleManagedEncryptionEnforcementConfig,
});