/AWS1/CL_GLUICEBERGENCKEY¶
Encryption key structure used for Iceberg table encryption. Contains the key ID, encrypted key metadata, optional reference to the encrypting key, and additional properties for the table's encryption scheme.
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_keyid TYPE /AWS1/GLUENCRYPTIONKEYIDSTRING /AWS1/GLUENCRYPTIONKEYIDSTRING¶
Unique identifier of the encryption key used for Iceberg table encryption. This ID is used to reference the key in table metadata and track which key was used to encrypt specific data.
iv_encryptedkeymetadata TYPE /AWS1/GLUENCKEYMETADATASTRING /AWS1/GLUENCKEYMETADATASTRING¶
Encrypted key and metadata, base64 encoded. The format of encrypted key metadata is determined by the table's encryption scheme and can be a wrapped format specific to the table's KMS provider.
Optional arguments:¶
iv_encryptedbyid TYPE /AWS1/GLUENCRYPTIONKEYIDSTRING /AWS1/GLUENCRYPTIONKEYIDSTRING¶
Optional ID of the key used to encrypt or wrap the key metadata in Iceberg table encryption. This field references another encryption key that was used to encrypt the current key's metadata.
it_properties TYPE /AWS1/CL_GLUSTRTOSTRMAP_W=>TT_STRINGTOSTRINGMAP TT_STRINGTOSTRINGMAP¶
A string to string map of additional metadata used by the table's encryption scheme. These properties provide additional context and configuration for the encryption key implementation.
Queryable Attributes¶
KeyId¶
Unique identifier of the encryption key used for Iceberg table encryption. This ID is used to reference the key in table metadata and track which key was used to encrypt specific data.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_KEYID() |
Getter for KEYID, with configurable default |
ASK_KEYID() |
Getter for KEYID w/ exceptions if field has no value |
HAS_KEYID() |
Determine if KEYID has a value |
EncryptedKeyMetadata¶
Encrypted key and metadata, base64 encoded. The format of encrypted key metadata is determined by the table's encryption scheme and can be a wrapped format specific to the table's KMS provider.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ENCRYPTEDKEYMETADATA() |
Getter for ENCRYPTEDKEYMETADATA, with configurable default |
ASK_ENCRYPTEDKEYMETADATA() |
Getter for ENCRYPTEDKEYMETADATA w/ exceptions if field has n |
HAS_ENCRYPTEDKEYMETADATA() |
Determine if ENCRYPTEDKEYMETADATA has a value |
EncryptedById¶
Optional ID of the key used to encrypt or wrap the key metadata in Iceberg table encryption. This field references another encryption key that was used to encrypt the current key's metadata.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ENCRYPTEDBYID() |
Getter for ENCRYPTEDBYID, with configurable default |
ASK_ENCRYPTEDBYID() |
Getter for ENCRYPTEDBYID w/ exceptions if field has no value |
HAS_ENCRYPTEDBYID() |
Determine if ENCRYPTEDBYID has a value |
Properties¶
A string to string map of additional metadata used by the table's encryption scheme. These properties provide additional context and configuration for the encryption key implementation.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_PROPERTIES() |
Getter for PROPERTIES, with configurable default |
ASK_PROPERTIES() |
Getter for PROPERTIES w/ exceptions if field has no value |
HAS_PROPERTIES() |
Determine if PROPERTIES has a value |