Scaleway logo
Key Manager API

google.protobuf.BytesValue

value
​string

google.protobuf.Int32Value

integer | null · int32

scaleway.key_manager.v1alpha1.DataKey

key_id
​string

ID of the data encryption key. (UUID format)

Symmetric encryption algorithm of the data encryption key (AES-256-GCM).

Enum values:
unknown_symmetric_encryption
aes_256_gcm
Default: unknown_symmetric_encryption
ciphertext
​string

Data encryption key ciphertext. Your data encryption key's ciphertext can be stored safely. It can only be decrypted through the keys you create in Key Manager, using the relevant key ID.

Data encryption key plaintext. (Optional) Your data encryption key's plaintext allows you to use the key immediately upon creation. It must neither be stored or shared.

created_at
​string | null · date-time

Data encryption key creation date. (RFC 3339 format)

scaleway.key_manager.v1alpha1.DataKey.Algorithm.SymmetricEncryption

string · enum
Enum values:
unknown_symmetric_encryption
aes_256_gcm
Default: unknown_symmetric_encryption

scaleway.key_manager.v1alpha1.DecryptResponse

key_id
​string

ID of the key used for decryption. (UUID format)

plaintext
​string

Key's decrypted data.

(Optional) Data encrypted with the latest key rotation. If the data was already encrypted with the latest key rotation, no output will be returned in the response object.

scaleway.key_manager.v1alpha1.EncryptResponse

key_id
​string

ID of the key used for encryption. (UUID format)

ciphertext
​string

Key's encrypted data.

scaleway.key_manager.v1alpha1.GenerateKeyMaterialImportParametersRequest.WrappingAlgorithm

string · enum
Enum values:
unknown_wrapping_algorithm
rsa_oaep_2048_sha256
rsa_oaep_3072_sha256
rsa_oaep_4096_sha256
Default: unknown_wrapping_algorithm

scaleway.key_manager.v1alpha1.GenerateKeyMaterialImportParametersResponse

key_id
​string

ID of the target key. (UUID format)

public_key
​string

The public key to wrap the key material.

import_token
​string

The token generated to authorize the import operation.

scaleway.key_manager.v1alpha1.ImportKeyMaterialRequest.EncryptedKeyMaterial

data
​string

The encrypted key material to import. This material must be encrypted using the public key and the exact wrapping algorithm returned by the GetKeyMaterialImportParameters method.

import_token
​string

The secure import token returned by the GetKeyMaterialImportParameters method.

scaleway.key_manager.v1alpha1.Key

id
​string

ID of the key. (UUID format)

srn
​string · pattern: ^srn://key-manager\.…

The SRN of the key.

project_id
​string

ID of the Project containing the key. (UUID format)

name
​string

Name of the key.

Key usage. See the Key.Usage enum for a description of possible values.

Key state. See the Key.State enum for a description of possible values.

Enum values:
unknown_state
enabled
disabled
pending_key_material
scheduled_for_deletion
Default: unknown_state
rotation_count
​integer · uint32

Number of key rotations. The rotation count tracks the number of times the key has been rotated.

created_at
​string | null · date-time

Key creation date. (RFC 3339 format)

updated_at
​string | null · date-time

Key last modification date. (RFC 3339 format)

protected
​boolean

Returns true if key protection is applied to the key.

locked
​boolean

Returns true if the key is locked.

description
​string | null

Description of the key.

tags
​string[]

List of the key's tags.

rotated_at
​string | null · date-time

Key last rotation date. (RFC 3339 format)

Key rotation policy.

Key origin. Refer to the Key.Origin enum for a description of values.

Enum values:
unknown_origin
scaleway_kms
external
Default: unknown_origin
deletion_requested_at
​string | null · date-time

Returns the time at which deletion was requested. (RFC 3339 format)

Key protection level. Refer to the Key.ProtectionLevel enum for a description of values.

Enum values:
unknown_protection_level
software
hsm
Default: unknown_protection_level
region
​string

Region where the key is stored.

scaleway.key_manager.v1alpha1.Key.Algorithm.AsymmetricEncryption

string · enum
Enum values:
unknown_asymmetric_encryption
rsa_oaep_2048_sha256
rsa_oaep_3072_sha256
rsa_oaep_4096_sha256
Default: unknown_asymmetric_encryption

scaleway.key_manager.v1alpha1.Key.Algorithm.AsymmetricSigning

string · enum
Enum values:
unknown_asymmetric_signing
ec_p256_sha256
ec_p384_sha384
rsa_pss_2048_sha256
rsa_pss_3072_sha256
rsa_pss_4096_sha256
rsa_pkcs1_2048_sha256
rsa_pkcs1_3072_sha256
Default: unknown_asymmetric_signing

scaleway.key_manager.v1alpha1.Key.Algorithm.KeyEncapsulation

string · enum
Enum values:
unknown_key_encapsulation
ml_kem_768
ml_kem_1024
Default: unknown_key_encapsulation

scaleway.key_manager.v1alpha1.Key.Algorithm.SymmetricEncryption

string · enum
Enum values:
unknown_symmetric_encryption
aes_256_gcm
Default: unknown_symmetric_encryption

scaleway.key_manager.v1alpha1.Key.Origin

string · enum
Enum values:
unknown_origin
scaleway_kms
external
Default: unknown_origin

scaleway.key_manager.v1alpha1.Key.ProtectionLevel

string · enum
Enum values:
unknown_protection_level
software
hsm
Default: unknown_protection_level

scaleway.key_manager.v1alpha1.Key.RotationPolicy

rotation_period
​string | null

Rotation period. Time interval between two key rotations. The minimum duration is 24 hours and the maximum duration is 1 year (876000 hours). (in seconds)

next_rotation_at
​string | null · date-time

Key next rotation date. Timestamp indicating the next scheduled rotation. (RFC 3339 format)

scaleway.key_manager.v1alpha1.Key.State

string · enum
Enum values:
unknown_state
enabled
disabled
pending_key_material
scheduled_for_deletion
Default: unknown_state

scaleway.key_manager.v1alpha1.Key.Usage

​

Encrypt and decrypt arbitrary payloads using a symmetric encryption algorithm. See the Key.Algorithm.SymmetricEncryption enum for a description of values.

​

Encrypt and decrypt arbitrary payloads using an asymmetric encryption algorithm. See the Key.Algorithm.AsymmetricEncryption enum for a description of values.

​

Sign and verify arbitrary messages using an asymmetric signing algorithm. See the Key.Algorithm.AsymmetricSigning enum for a description of values.

​

Wrap and unwrap key using a key encapsulation algorithm. See the Key.Algorithm.KeyEncapulation enum for a description of values.

scaleway.key_manager.v1alpha1.KeyRotation

key_id
​string

ID of the associated key. (UUID format)

index
​integer · uint32

Index of the key rotation. The rotation index tracks the specific version of the key material.

Status of the key rotation. See the KeyRotation.Status enum for a description of possible values.

Enum values:
unknown_status
enabled
deleted
Default: unknown_status
manually_rotated
​boolean

Returns true if the key was rotated manually, or false if it was rotated automatically by a rotation policy.

created_at
​string | null · date-time

Key rotation creation date. (RFC 3339 format)

updated_at
​string | null · date-time

Key rotation last modification date. (RFC 3339 format)

deleted_at
​string | null · date-time

Key rotation deletion date. (RFC 3339 format)

scaleway.key_manager.v1alpha1.KeyRotation.Status

string · enum
Enum values:
unknown_status
enabled
deleted
Default: unknown_status

scaleway.key_manager.v1alpha1.ListAlgorithmsRequest.Usage

string · enum
Enum values:
unknown_usage
symmetric_encryption
asymmetric_encryption
asymmetric_signing
key_encapsulation
Default: unknown_usage

scaleway.key_manager.v1alpha1.ListAlgorithmsResponse

Returns a list of algorithms matching the requested criteria.

scaleway.key_manager.v1alpha1.ListAlgorithmsResponse.Algorithm

usage
​string
name
​string
recommended
​boolean

scaleway.key_manager.v1alpha1.ListKeyRotationsRequest.OrderBy

string · enum
Enum values:
created_at_asc
created_at_desc
Default: created_at_asc

scaleway.key_manager.v1alpha1.ListKeyRotationsResponse

Single page of key rotations matching the requested criteria.

total_count
​integer · uint64

Total count of key rotations matching the requested criteria.

scaleway.key_manager.v1alpha1.ListKeysRequest.OrderBy

string · enum
Enum values:
name_asc
name_desc
created_at_asc
created_at_desc
updated_at_asc
updated_at_desc
Default: name_asc

scaleway.key_manager.v1alpha1.ListKeysRequest.Usage

string · enum
Enum values:
unknown_usage
symmetric_encryption
asymmetric_encryption
asymmetric_signing
key_encapsulation
Default: unknown_usage

scaleway.key_manager.v1alpha1.ListKeysResponse

Single page of keys matching the requested criteria.

total_count
​integer · uint64

Total count of keys matching the requested criteria.

scaleway.key_manager.v1alpha1.PublicKey

pem
​string

scaleway.key_manager.v1alpha1.SignResponse

key_id
​string

ID of the key used to generate the signature. (UUID format)

signature
​string

The message signature.

scaleway.key_manager.v1alpha1.UnwrapKeyResponse

key_id
​string

(UUID format)

plaintext
​string

scaleway.key_manager.v1alpha1.VerifyResponse

key_id
​string

ID of the key used for verification. (UUID format)

valid
​boolean

Defines whether the signature is valid. Returns true if the signature is valid for the digest and key, and false otherwise.

scaleway.key_manager.v1alpha1.WrapKeyResponse

key_id
​string

(UUID format)

ciphertext
​string