data_encryption_keys

Creates, updates, deletes, gets or lists a data_encryption_keys resource.

Overview

Name	data_encryption_keys
Type	Resource
Id	confluent.encryption_keys.data_encryption_keys

Fields

Name	Datatype	Description
algorithm	string	Algorithm of the dek
deleted	boolean	Whether the dek is deleted
encryptedKeyMaterial	string	Encrypted key material of the dek
kekName	string	Kek name of the dek
keyMaterial	string	Raw key material of the dek
subject	string	Subject of the dek
ts	integer	Timestamp of the dek
version	integer	Version of the dek

Methods

Name	Accessible by	Required Params	Description
get_dek	SELECT	name, subject
get_dek_subjects	SELECT	name
create_dek	INSERT	name
delete_dek_versions	DELETE	name, subject
undelete_dek_versions	EXEC	name, subject

SELECT examples

SELECT
algorithm,
deleted,
encryptedKeyMaterial,
kekName,
keyMaterial,
subject,
ts,
version
FROM confluent.encryption_keys.data_encryption_keys
WHERE name = '{{ name }}';

INSERT example

Use the following StackQL query and manifest file to create a new data_encryption_keys resource.

Required Properties

/*+ create */
INSERT INTO confluent.encryption_keys.data_encryption_keys (
data__subject,
data__version,
data__algorithm,
data__encryptedKeyMaterial,
data__deleted,
name
)
SELECT 
'{{ subject }}',
'{{ version }}',
'{{ algorithm }}',
'{{ encryptedKeyMaterial }}',
'{{ deleted }}',
'{{ name }}'
;

All Properties

/*+ create */
INSERT INTO confluent.encryption_keys.data_encryption_keys (
name
)
SELECT 
'{{ name }}'
;

Manifest

- name: data_encryption_keys
  props:
    - name: name
      value: string
    - name: subject
      value: string
    - name: version
      value: integer
    - name: algorithm
      value: string
    - name: encryptedKeyMaterial
      value: string
    - name: deleted
      value: boolean

DELETE example

Deletes the specified data_encryption_keys resource.

/*+ delete */
DELETE FROM confluent.encryption_keys.data_encryption_keys
WHERE name = '{{ name }}'
AND subject = '{{ subject }}';