BlobContentKeyTargetEnvelopeRequest | API reference

Shape

object

8 fields

bindingIdstringrequired
- not empty
containerIdstringrequired
- not empty
containerKeyEpochintegerrequired
- greater than 0
Epoch of the container KEK that wraps the key.
containerKeyEpochIdstringrequired
- not empty
Id of that container KEK epoch.
containerManifestHashstringrequired
- not empty
Container manifest head the wrap was made under.
documentIdstringrequired
- not empty
wrappedKeystringrequired
- exactly 64 characters
- base64, pattern ^[A-Za-z0-9+/]{64}$
The content key encrypted under the container KEK.
wrappingMetadataobjectrequired
Wrapping suite and IV needed to unwrap wrappedKey.
2 fields
- suitestringrequired
  - always tearleads.blob.content-key-wrap.aes-256-gcm-container-kek
- ivstringrequired
  - exactly 16 characters
  - base64, pattern ^[A-Za-z0-9+/]{16}$

Other fields are allowed.