Class: Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoHashConfig

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
generated/google/apis/dlp_v2/classes.rb,
generated/google/apis/dlp_v2/representations.rb,
generated/google/apis/dlp_v2/representations.rb

Overview

Pseudonymization method that generates surrogates via cryptographic hashing. Uses SHA-256. The key size must be either 32 or 64 bytes. Outputs a base64 encoded representation of the hashed output (for example, L7k0BHmF1ha5U3NfGykjro4xWi1MPVQPjhMAZbSV9mM=). Currently, only string and integer values can be hashed. See https://cloud.google.com/dlp/docs/pseudonymization to learn more.

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods included from Core::JsonObjectSupport

#to_json

Methods included from Core::Hashable

process_value, #to_h

Constructor Details

#initialize(**args) ⇒ GooglePrivacyDlpV2CryptoHashConfig

Returns a new instance of GooglePrivacyDlpV2CryptoHashConfig



1187
1188
1189
# File 'generated/google/apis/dlp_v2/classes.rb', line 1187

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#crypto_keyGoogle::Apis::DlpV2::GooglePrivacyDlpV2CryptoKey

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key. Corresponds to the JSON property cryptoKey



1185
1186
1187
# File 'generated/google/apis/dlp_v2/classes.rb', line 1185

def crypto_key
  @crypto_key
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



1192
1193
1194
# File 'generated/google/apis/dlp_v2/classes.rb', line 1192

def update!(**args)
  @crypto_key = args[:crypto_key] if args.key?(:crypto_key)
end