Class: Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoHashConfig

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
generated/google/apis/dlp_v2/classes.rb,
generated/google/apis/dlp_v2/representations.rb,
generated/google/apis/dlp_v2/representations.rb

Overview

Pseudonymization method that generates surrogates via cryptographic hashing. Uses SHA-256. The key size must be either 32 or 64 bytes. Outputs a base64 encoded representation of the hashed output (for example, L7k0BHmF1ha5U3NfGykjro4xWi1MPVQPjhMAZbSV9mM=). Currently, only string and integer values can be hashed. See https://cloud.google.com/dlp/docs/pseudonymization to learn more.

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods included from Core::JsonObjectSupport

#to_json

Methods included from Core::Hashable

process_value, #to_h

Constructor Details

#initialize(**args) ⇒ GooglePrivacyDlpV2CryptoHashConfig

Returns a new instance of GooglePrivacyDlpV2CryptoHashConfig



1257
1258
1259
# File 'generated/google/apis/dlp_v2/classes.rb', line 1257

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#crypto_keyGoogle::Apis::DlpV2::GooglePrivacyDlpV2CryptoKey

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key. Corresponds to the JSON property cryptoKey



1255
1256
1257
# File 'generated/google/apis/dlp_v2/classes.rb', line 1255

def crypto_key
  @crypto_key
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



1262
1263
1264
# File 'generated/google/apis/dlp_v2/classes.rb', line 1262

def update!(**args)
  @crypto_key = args[:crypto_key] if args.key?(:crypto_key)
end