Package com.hashicorp.cdktf.providers.google.compute_disk

Interface ComputeDiskSourceImageEncryptionKey

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

ComputeDiskSourceImageEncryptionKey.Jsii$Proxy

@Generated(value="jsii-pacmak/1.102.0 (build e354887)",
           date="2024-08-31T03:59:18.345Z")
@Stability(Stable)
public interface ComputeDiskSourceImageEncryptionKey
extends software.amazon.jsii.JsiiSerializable

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static class	ComputeDiskSourceImageEncryptionKey.Builder	A builder for ComputeDiskSourceImageEncryptionKey
static class	ComputeDiskSourceImageEncryptionKey.Jsii$Proxy	An implementation for ComputeDiskSourceImageEncryptionKey

Method Summary

Modifier and Type	Method	Description
static ComputeDiskSourceImageEncryptionKey.Builder	builder()
default String	getKmsKeySelfLink()	The self link of the encryption key used to encrypt the disk.
default String	getKmsKeyServiceAccount()	The service account used for the encryption request for the given KMS key.
default String	getRawKey()	Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getKmsKeySelfLink

@Stability(Stable)
@Nullable
default String getKmsKeySelfLink()

The self link of the encryption key used to encrypt the disk.

Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account ('service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com') must have 'roles/cloudkms.cryptoKeyEncrypterDecrypter' to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/compute_disk#kms_key_self_link ComputeDisk#kms_key_self_link}

getKmsKeyServiceAccount

@Stability(Stable)
@Nullable
default String getKmsKeyServiceAccount()

The service account used for the encryption request for the given KMS key.

If absent, the Compute Engine Service Agent service account is used. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/compute_disk#kms_key_service_account ComputeDisk#kms_key_service_account}

getRawKey

@Stability(Stable)
@Nullable
default String getRawKey()

Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.

Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/compute_disk#raw_key ComputeDisk#raw_key}

builder

@Stability(Stable)
static ComputeDiskSourceImageEncryptionKey.Builder builder()

Returns:

a ComputeDiskSourceImageEncryptionKey.Builder of ComputeDiskSourceImageEncryptionKey