ContainerRotationRequest
A rekey, revoke, or move, which rotates the container KEK, plus the descendant rekeys that must commit with it.
Shape
object
17 fields
bodyany JSON valuerequired- at most 4,096 items
- at most 100 items
eventobject with any fieldsrequiredexpectedManifestHashstringrequired- not empty
keyEpochobject with any fieldsrequiredmanifestobject with any fieldsrequired- at most 100 items
parentKekRefobjectoptionalnullable3 fields
containerIdstringrequired- not empty
containerKeyEpochIdstringrequired- not empty
keyEpochHashstringrequired- exactly 64 characters
- lowercase hexadecimal
Other fields are allowed.
predecessorBridgeobject with any fieldsrequirednullable- at most 100 items
userRecipientKeyslist of object with any fieldsoptionalwrapslist of object with any fieldsrequired- at most 64 items
Descendant rekeys, parent first; they commit with the rotation or not at all.
Other fields are allowed.