COconfluent
Data Encryption Keys (v1)

Get a dek by subject and version

get/dek-registry/v1/keks/{name}/deks/{subject}/versions/{version}

Request

  • Base URL
    https://psrc-00000.region.provider.confluent.cloud
  • URL
    https://psrc-00000.region.provider.confluent.cloud/dek-registry/v1/keks/{name}/deks/{subject}/versions/{version}
  • Auth
    • HTTP basic
    • or OAuth 2
      Client credentials
      Token URL: https://api.confluent.cloud/sts/v1/oauth2/token

Path parameters

namestring required

Name of the kek

subjectstring required

Subject of the dek

versionstring required

Version of the dek

Query parameters

algorithm'AES128_GCM' | 'AES256_GCM' | 'AES256_SIV'

Algorithm of the dek

deletedboolean

Whether to include deleted keys

Response

The dek info

kekNamestring

Kek name of the dek

subjectstring

Subject of the dek

versioninteger

Version of the dek

algorithm'AES128_GCM' | 'AES256_GCM' | 'AES256_SIV'

Algorithm of the dek

encryptedKeyMaterialstring

Encrypted key material of the dek

keyMaterialstring

Raw key material of the dek

tsinteger

Timestamp of the dek

deletedboolean

Whether the dek is deleted

Example response

{
  "kekName": "kekName",
  "keyMaterial": "keyMaterial",
  "deleted": true,
  "subject": "subject",
  "encryptedKeyMaterial": "encryptedKeyMaterial",
  "version": 0,
  "algorithm": "AES128_GCM",
  "ts": 6
}

Changes

No recorded changes to this operation across all 7 revisions of this API.