Generate Data Key
symmetric-crypto
Generate Data Key
Generates a new symmetric data encryption key (not a KMS key) and returns the generated key as plaintext and as ciphertext encrypted with the specified symmetric KMS key.
POST
Generate Data Key
Authorizations
The Authorization header expects a Bearer token.
Body
application/json
Supported symmetric encryption algorithms.
- AES_128: Deprecated. It is impossible to create new keys with this algorithm. AES algorithm with 128-bit keys.
- AES_256: AES algorithm with 256-bit keys.
Available options:
SYMMETRIC_ALGORITHM_UNSPECIFIED, AES_128, AES_256 ID of the symmetric KMS key that the generated data key should be encrypted with.
Additional authenticated data (AAD context), optional. If specified, this data will be required for decryption with the [SymmetricDecryptRequest]. Should be encoded with base64.
If true, the method won't return the data key as plaintext.
Default value is false.
Response
200 - application/json
A successful response.