---
title: "Get a dek by subject and version"
method: GET
path: "/dek-registry/v1/keks/{name}/deks/{subject}/versions/{version}"
tags: ["Data Encryption Keys (v1)"]
---

# Get a dek by subject and version

`GET /dek-registry/v1/keks/{name}/deks/{subject}/versions/{version}`

## Request

- Base URL: `https://psrc-00000.region.provider.confluent.cloud`
- URL: `https://psrc-00000.region.provider.confluent.cloud/dek-registry/v1/keks/{name}/deks/{subject}/versions/{version}`
- Auth: one of:
  - HTTP basic
  - OAuth 2
    - Client credentials
    - Token URL: `https://api.confluent.cloud/sts/v1/oauth2/token`

## Path parameters

- `name` string, required
- `subject` string, required
- `version` string, required

## Query parameters

- `algorithm` 'AES128_GCM' | 'AES256_GCM' | 'AES256_SIV'
- `deleted` boolean

## Response `200`

The dek info

- Dek
  - `kekName` string: Kek name of the dek
  - `subject` string: Subject of the dek
  - `version` integer: Version of the dek
  - `algorithm` 'AES128_GCM' | 'AES256_GCM' | 'AES256_SIV': Algorithm of the dek
  - `encryptedKeyMaterial` string: Encrypted key material of the dek
  - `keyMaterial` string: Raw key material of the dek
  - `ts` integer: Timestamp of the dek
  - `deleted` boolean: Whether the dek is deleted

## Other responses

- `404`: Error code 40470 -- Key not found
- `422`: Unprocessable entity. Error code 42202 -- Invalid version. Error code 42271 -- Invalid key.
- `500`: Error code 50070 -- Dek generation error

---

[API](https://skmtc.dev/confluent/apis/confluent-cloud-apis.md) - [All operations](https://skmtc.dev/confluent/apis/confluent-cloud-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/confluent/apis/confluent-cloud-apis/revisions/018ddeaf203e?raw)