BlobContentKeyTargetEnvelopeResponse
A stored wrap of a blob content key to one container KEK for one attachment binding.
Shape
object
8 fields
bindingIdstringrequiredcontainerIdstringrequiredcontainerKeyEpochintegerrequired- greater than 0
containerKeyEpochIdstringrequiredId of the container KEK epoch that wraps the key.
containerManifestHashstringrequireddocumentIdstringrequiredwrappedKeystringrequiredThe content key encrypted under the container KEK.
wrappingMetadataobject with any fieldsrequiredWrapping suite and IV needed to unwrap
wrappedKey.
Other fields are allowed.