COconfluent
Data Encryption Keys (v1)

Create a dek

post/dek-registry/v1/keks/{name}/deks

Request

  • Base URL
    https://psrc-00000.region.provider.confluent.cloud
  • URL
    https://psrc-00000.region.provider.confluent.cloud/dek-registry/v1/keks/{name}/deks
  • Auth
    • HTTP basic
    • or OAuth 2
      Client credentials
      Token URL: https://api.confluent.cloud/sts/v1/oauth2/token

Path parameters

namestring required

Name of the kek

Request body

subjectstring

Subject of the dek

versioninteger

Version of the dek

algorithm'AES128_GCM' | 'AES256_GCM' | 'AES256_SIV'

Algorithm of the dek

encryptedKeyMaterialstring

Encrypted key material of the dek

deletedboolean

Whether the dek is deleted

Example request

{
  "subject": "subject",
  "encryptedKeyMaterial": "encryptedKeyMaterial",
  "version": 0,
  "algorithm": "AES128_GCM"
}

Response

The create response

kekNamestring

Kek name of the dek

subjectstring

Subject of the dek

versioninteger

Version of the dek

algorithm'AES128_GCM' | 'AES256_GCM' | 'AES256_SIV'

Algorithm of the dek

encryptedKeyMaterialstring

Encrypted key material of the dek

keyMaterialstring

Raw key material of the dek

tsinteger

Timestamp of the dek

deletedboolean

Whether the dek is deleted

Example response

{
  "kekName": "kekName",
  "keyMaterial": "keyMaterial",
  "deleted": true,
  "subject": "subject",
  "encryptedKeyMaterial": "encryptedKeyMaterial",
  "version": 0,
  "algorithm": "AES128_GCM",
  "ts": 6
}

Changes

No recorded changes to this operation across all 7 revisions of this API.