Class CustomerEncryptionKey
A customer-managed encryption key (CMEK) for the Compute Engine resources of the associated workstation configuration. Specify the name of your Cloud KMS encryption key and the default service account. We recommend that you use a separate service account and follow Cloud KMS best practices.
Implements
Inherited Members
Namespace: Google.Apis.CloudWorkstations.v1.Data
Assembly: Google.Apis.CloudWorkstations.v1.dll
Syntax
public class CustomerEncryptionKey : IDirectResponseSchema
Properties
ETag
The ETag of the item.
Declaration
public virtual string ETag { get; set; }
Property Value
Type | Description |
---|---|
string |
KmsKey
Immutable. The name of the Google Cloud KMS encryption key. For example,
"projects/PROJECT_ID/locations/REGION/keyRings/KEY_RING/cryptoKeys/KEY_NAME"
. The key must be in the same
region as the workstation configuration.
Declaration
[JsonProperty("kmsKey")]
public virtual string KmsKey { get; set; }
Property Value
Type | Description |
---|---|
string |
KmsKeyServiceAccount
Immutable. The service account to use with the specified KMS key. We recommend that you use a separate
service account and follow KMS best practices. For more information, see Separation of
duties and gcloud kms keys add-iam-policy-binding
--member
.
Declaration
[JsonProperty("kmsKeyServiceAccount")]
public virtual string KmsKeyServiceAccount { get; set; }
Property Value
Type | Description |
---|---|
string |