Class: Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoHashConfig

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
generated/google/apis/dlp_v2/classes.rb,
generated/google/apis/dlp_v2/representations.rb,
generated/google/apis/dlp_v2/representations.rb

Overview

Pseudonymization method that generates surrogates via cryptographic hashing. Uses SHA-256. The key size must be either 32 or 64 bytes. Outputs a base64 encoded representation of the hashed output (for example, L7k0BHmF1ha5U3NfGykjro4xWi1MPVQPjhMAZbSV9mM=). Currently, only string and integer values can be hashed. See https://cloud.google.com/dlp/docs/pseudonymization to learn more.

Instance Attribute Summary collapse

Instance Method Summary collapse

Methods included from Core::JsonObjectSupport

#to_json

Methods included from Core::Hashable

process_value, #to_h

Constructor Details

#initialize(**args) ⇒ GooglePrivacyDlpV2CryptoHashConfig

Returns a new instance of GooglePrivacyDlpV2CryptoHashConfig.



1267
1268
1269
 
# File 'generated/google/apis/dlp_v2/classes.rb', line 1267

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#crypto_key ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoKey

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key. Corresponds to the JSON property cryptoKey

Returns:



1265
1266
1267
 
# File 'generated/google/apis/dlp_v2/classes.rb', line 1265

def crypto_key
  @crypto_key
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



1272
1273
1274
 
# File 'generated/google/apis/dlp_v2/classes.rb', line 1272

def update!(**args)
  @crypto_key = args[:crypto_key] if args.key?(:crypto_key)
end