Package com.hashicorp.cdktf.providers.google.logging_organization_bucket_config

Class LoggingOrganizationBucketConfigCmekSettings.Builder

java.lang.Object

com.hashicorp.cdktf.providers.google.logging_organization_bucket_config.LoggingOrganizationBucketConfigCmekSettings.Builder

All Implemented Interfaces:

software.amazon.jsii.Builder<LoggingOrganizationBucketConfigCmekSettings>

Enclosing interface:

LoggingOrganizationBucketConfigCmekSettings

@Stability(Stable)
public static final class LoggingOrganizationBucketConfigCmekSettings.Builder
extends Object
implements software.amazon.jsii.Builder<LoggingOrganizationBucketConfigCmekSettings>

A builder for LoggingOrganizationBucketConfigCmekSettings

Constructor Summary

Constructors

Constructor	Description
Builder()

Method Summary

Modifier and Type	Method	Description
LoggingOrganizationBucketConfigCmekSettings	build()	Builds the configured instance.
LoggingOrganizationBucketConfigCmekSettings.Builder	kmsKeyName(String kmsKeyName)	Sets the value of LoggingOrganizationBucketConfigCmekSettings.getKmsKeyName()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Builder

public Builder()

Method Detail

kmsKeyName

@Stability(Stable)
public LoggingOrganizationBucketConfigCmekSettings.Builder kmsKeyName(String kmsKeyName)

Sets the value of LoggingOrganizationBucketConfigCmekSettings.getKmsKeyName()

Parameters:

kmsKeyName - The resource name for the configured Cloud KMS key. This parameter is required. KMS key name format: "projects/[PROJECT_ID]/locations/[LOCATION]/keyRings/[KEYRING]/cryptoKeys/[KEY]" To enable CMEK for the bucket, set this field to a valid kmsKeyName for which the associated service account has the required cloudkms.cryptoKeyEncrypterDecrypter roles assigned for the key. The Cloud KMS key used by the bucket can be updated by changing the kmsKeyName to a new valid key name. Encryption operations that are in progress will be completed with the key that was in use when they started. Decryption operations will be completed using the key that was used at the time of encryption unless access to that key has been revoked. See [Enabling CMEK for Logging Buckets](https://cloud.google.com/logging/docs/routing/managed-encryption-storage) for more information. Docs at Terraform Registry: {@link https://registry.terraform.io/providers/hashicorp/google/5.43.1/docs/resources/logging_organization_bucket_config#kms_key_name LoggingOrganizationBucketConfig#kms_key_name}

Returns:

this

build

@Stability(Stable)
public LoggingOrganizationBucketConfigCmekSettings build()

Builds the configured instance.

Specified by:

build in interface software.amazon.jsii.Builder<LoggingOrganizationBucketConfigCmekSettings>

Returns:

a new instance of LoggingOrganizationBucketConfigCmekSettings

Throws:

NullPointerException - if any required attribute was not provided