6.10.2.18 ReleaseEncryptionKey
Optional
The model works without this entity.
6.10.2.18.1 Purpose¶
A reference to a key, held in the key management service (KMS), that encrypts confidential content.
6.10.2.18.2 Questions it answers¶
- Which key encrypts a confidential depot or chunk?
- When was the key last rotated?
6.10.2.18.3 Fields¶
| Field | Type | Cardinality | Description |
|---|---|---|---|
id |
string (uuid) |
1..1 |
Key. |
kms_ref |
string |
1..1 |
|
rotated_at |
datetime |
0..1 |
|
created_at |
datetime |
1..1 |
6.10.2.18.4 Relationships¶
Referenced by
ReleaseDepot.encryption_key(0..1)ReleaseChunk.encryption_key(0..1)
6.10.2.18.5 Rules & constraints¶
- Only for confidential content. The key lives in a KMS, never in the database.